Overview

overview

10

Static

static

3

733862e292...b4.exe

windows7-x64

10

733862e292...b4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    733862e29211d06fdffa2ac14cfa89b4

  • Size

    417KB

  • Sample

    240125-aet59acbdr

  • MD5

    733862e29211d06fdffa2ac14cfa89b4

  • SHA1

    cd4bd4705ef3bc3bc4325dd9e660ce702f94b52a

  • SHA256

    bd558693c9e486969b2f64f547dead71c0a769643830f4567e61be153091f50a

  • SHA512

    e71cc8d0bfd32ffeb4da06661518c1ec096371e19938c77bfa036b853d18716d9cf32d108fcc6cc3d2af880b2568dab9584aa055c7f725188d77a29e995c7944

  • SSDEEP

    12288:Mdu8JKZwPtLHenEoDMNVxTPSodIOS1L/AwV:0JVPtzeD4NVVnS1Lp

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      733862e29211d06fdffa2ac14cfa89b4

    • Size

      417KB

    • MD5

      733862e29211d06fdffa2ac14cfa89b4

    • SHA1

      cd4bd4705ef3bc3bc4325dd9e660ce702f94b52a

    • SHA256

      bd558693c9e486969b2f64f547dead71c0a769643830f4567e61be153091f50a

    • SHA512

      e71cc8d0bfd32ffeb4da06661518c1ec096371e19938c77bfa036b853d18716d9cf32d108fcc6cc3d2af880b2568dab9584aa055c7f725188d77a29e995c7944

    • SSDEEP

      12288:Mdu8JKZwPtLHenEoDMNVxTPSodIOS1L/AwV:0JVPtzeD4NVVnS1Lp

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks