General

  • Target

    4f6c85b1fe3b69d8e187779ed68f38e1.exe

  • Size

    3.9MB

  • MD5

    4f6c85b1fe3b69d8e187779ed68f38e1

  • SHA1

    51bf48b1dc262a36a48243ec422a67aa7389b042

  • SHA256

    b852a910668d96c99c4871a22e8f12f83c120949e2db5a2daf4123dff6929553

  • SHA512

    4e78ae142fc65b11cef6443ff9523cb05bd65e50ddd4272d6dd0edbfddee886fd71b05157dd8361004cd0e8a65a89b8a3b7944723b965dbd75cb9045f2d24976

  • SSDEEP

    98304:QeXhev9Pmf3br2A1qwd59GORXnXbA4suHSIB:3Xi9Pmf32RwXwAXchuyG

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

Files

  • 4f6c85b1fe3b69d8e187779ed68f38e1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections