Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f5243c30785aeb51ff19c7476cfe98399a6e823ab6c900ab755cc1f1c7efef97

  • Size

    1.7MB

  • Sample

    240128-2dn2dsbeg9

  • MD5

    596404d266d7105282abdc1c6ad1ad25

  • SHA1

    9ba501299f1f8930e705d2deaad6c2fd896ffb5b

  • SHA256

    f5243c30785aeb51ff19c7476cfe98399a6e823ab6c900ab755cc1f1c7efef97

  • SHA512

    884dbb24455fae479e3351a1a28b4ae13635ed3c0ff5c0e1a822837bff6a53891a332e6fef14e933c34d358ef91edc742ca73294c06bf33426436972967574ce

  • SSDEEP

    24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      f5243c30785aeb51ff19c7476cfe98399a6e823ab6c900ab755cc1f1c7efef97

    • Size

      1.7MB

    • MD5

      596404d266d7105282abdc1c6ad1ad25

    • SHA1

      9ba501299f1f8930e705d2deaad6c2fd896ffb5b

    • SHA256

      f5243c30785aeb51ff19c7476cfe98399a6e823ab6c900ab755cc1f1c7efef97

    • SHA512

      884dbb24455fae479e3351a1a28b4ae13635ed3c0ff5c0e1a822837bff6a53891a332e6fef14e933c34d358ef91edc742ca73294c06bf33426436972967574ce

    • SSDEEP

      24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks