General
-
Target
2292-44-0x0000000000400000-0x0000000000592000-memory.dmp
-
Size
1.6MB
-
MD5
f260624634e633c3888404a91c252557
-
SHA1
55d14c3226108a6640840d9c9a4c9c4cb18091a9
-
SHA256
3bc6fbd989412787732550ff8768b1c467ef2846b066f0a62fbb9a5a8f6e23cd
-
SHA512
bd12a042c9ae8b5454a0d776e6f2f9e72a1fcd0b1f24b91cb1f9c4eb9f3cc210f19346059aaa90e64aff90934edce8c7f3af0bf8431a3cc7a5f1768d1a896a56
-
SSDEEP
24576:XK/CJI0VN1d8ysy1WdeM+GkdnddMF2ScVC3oKNVpNXIRf4cvuy4jS:XAgI6HJodeMinddG2lCYKTpNXIt
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
Redline family
-
Zgrat family
-
.NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2292-44-0x0000000000400000-0x0000000000592000-memory.dmp
Headers
Sections