Extracted

• • Target
    67331d50bcc642779ebc8bb68b22f7fa
  • Size 758KB
  • SHA256 b82495c69aca9615403b3e61a2ad8adce86de777d4f8a1f195ac7725a0f55b3d
  • MD5 67331d50bcc642779ebc8bb68b22f7fa
  • SHA1 2684448697df771c6dbdc03ae558f99d4cee9273
  • SHA512 f36f9a8d6175fc4905784898729302e633dfae1cee2df649696189f1dfe48136f2c49325eebae05aa48387b7bfe349913e7eb2d8e9bb783100ad6efe8aa1d6ec
  • SSDEEP 12288:12E78Rfp8JFT5cgghj2sB2eTNHjB2vgzm+QiLSSR0o6y2/:12K8RaJt5nqjDIoNHWgZVSSR0o6y2
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  zgratratxloaderhdcoloader

  • Detect ZGRat V1

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Xloader payload

    rat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2