Overview

overview

10

Static

static

3

dd2739067b...43.exe

windows7-x64

3

dd2739067b...43.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dd2739067bfd088a6a1e5f7502105643.exe1111

  • Size

    721KB

  • Sample

    240110-k5d7tsdeb2

  • MD5

    dd2739067bfd088a6a1e5f7502105643

  • SHA1

    819dd6a079abab8d34f85d9a1d06a0d556745fb7

  • SHA256

    0b5b79893faa97f10737f52617ff8cdf0de0c0e064ae8303cd12eddf23ee2141

  • SHA512

    b246edb5d53c1794dab80a6bbcb2997e47a5868e7ccb67accebaf3797413d66edd82a73aeb4444aadea8fcc7f9e0bc3c83ae806caf78e4f16db0c0688801f9ad

  • SSDEEP

    12288:3izZBEP85HLKFLHOa8VnCTvy3PvoD5Xi0ztOTQHmO8eaktaLh/x2:S9BEP8RLKFLuPnCJln5OcHh8eaiC52

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      dd2739067bfd088a6a1e5f7502105643.exe1111

    • Size

      721KB

    • MD5

      dd2739067bfd088a6a1e5f7502105643

    • SHA1

      819dd6a079abab8d34f85d9a1d06a0d556745fb7

    • SHA256

      0b5b79893faa97f10737f52617ff8cdf0de0c0e064ae8303cd12eddf23ee2141

    • SHA512

      b246edb5d53c1794dab80a6bbcb2997e47a5868e7ccb67accebaf3797413d66edd82a73aeb4444aadea8fcc7f9e0bc3c83ae806caf78e4f16db0c0688801f9ad

    • SSDEEP

      12288:3izZBEP85HLKFLHOa8VnCTvy3PvoD5Xi0ztOTQHmO8eaktaLh/x2:S9BEP8RLKFLuPnCJln5OcHh8eaiC52

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks