Overview

overview

10

Static

static

10

68158010a0...56.exe

windows7-x64

10

68158010a0...56.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68158010a0eff590b3816cfc79f4b656

  • Size

    1.7MB

  • MD5

    68158010a0eff590b3816cfc79f4b656

  • SHA1

    19c311fa333536e9d053ed37db0be4f0a27d6556

  • SHA256

    229a935c36bb178998ea1a56ecc42c1cdedca5915edef04e9674ce558e877378

  • SHA512

    d989c11a8976a9a63834a21499fb59e27367695754b0666c302a5331ad0895fb7a6fb0b49beb123249ab85b792c953512df623fcfed3e853a0b74e005675f30f

  • SSDEEP

    24576:pzlQVQOdPPMYSes5pv9e6ZayEeTFR7kR1+CJMOSDCFi9BK1Wk1b96GiMdQAK/sAh:E7Bs5pv9e6ZayRTTsB1Jb96GVVCn0

Score
10/10
vmprotectzgrat

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
    zgrat
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 68158010a0eff590b3816cfc79f4b656
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections