General

  • Target

    file.exe

  • Size

    4.6MB

  • MD5

    17a553248fc52f518f75bbe878ea1aa9

  • SHA1

    dd9a6679f9fc6d580a49a2288eabb0b7e91f8717

  • SHA256

    a9c22a3fe2856a1c2afeccaad1188e6e4fab5990b800bbe6d02212909dea8f2e

  • SHA512

    44640567bb4c6219d5058adcf8fe678b066b11c0bf44a6f32c259c95bed160c6f11cf879e2b915390cea1f394f4d60c3f3e98ff37776446591da8cad25b9af70

  • SSDEEP

    98304:64sQLWqRi8tmrI3gNGHjcX5uN13mEzquag:6H+WqRi88sEGHAX5uaEzP

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

Files

  • file.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections