General

  • Target

    ae58c411971f1c6229a57e132c27626ba6d4522c31d558e1df8e6b3913079429

  • Size

    5.0MB

  • MD5

    7caf82de8081d0b2e5fbe86a3f0ce3a3

  • SHA1

    4cb9f90e7ef238f97e0d11828ca0d07b1d238280

  • SHA256

    ae58c411971f1c6229a57e132c27626ba6d4522c31d558e1df8e6b3913079429

  • SHA512

    9a95f1d7dfa50c0c50f3d1a406db78136bb09df8c14105f183cfc64a83cc91dc3582da0af65ff654ef977742763a276dd2b47b41b138ea21346155df848e063a

  • SSDEEP

    98304:McZEhbp+2Z01s23G/Mul2rq/aReDkizMeQU2:MIE06/Mul2rVe4iwVU

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae58c411971f1c6229a57e132c27626ba6d4522c31d558e1df8e6b3913079429
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections