General

  • Target

    ee2ed8135a09d3af5737b39de0340ce4.bin

  • Size

    3.7MB

  • MD5

    1944cfe1910814fda86652b9ff356b78

  • SHA1

    0e6c3e04360336e1ea81eeb7afd16290a2fd983d

  • SHA256

    ebd3108383aee58b939fea1a7017ac5a9cd672a6c10efc03ba28c7f35322ac4d

  • SHA512

    6ddb07180e9d1f30f7eeedad927e7226acd4434b58088f0b0ff80128c9739da458bce83cc220378de30e7da6dc3e47a0b481380d35c04169a9a64d0eec8229b5

  • SSDEEP

    98304:7ob8EujdbcW8/5HKQIYUKmjv1E5jge+WfI:7BECdbcWQq7Yr28jX3fI

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

Files

  • ee2ed8135a09d3af5737b39de0340ce4.bin
    .zip

    Password: infected

  • 95e15b50e1e8de17a0537512e7d84d479ab888ab75c314f73bda0ca764923861.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections