General

  • Target

    file.exe

  • Size

    4.8MB

  • MD5

    3b9e5780af1db7a21a296e5bd346ef85

  • SHA1

    f503abfa04e87b4ab120f8c6c1434616c9e83f1a

  • SHA256

    fca98a279dc97097e46b9b3da8e274b6b896d7e2090aa8c5c341e74608f07c8c

  • SHA512

    3c2a35a7ad17e127c8ede0b8c1b229542890713390280cc9cae656ad8781b7b43df0552aaef0bbe54cb1fd73d194f3e27d7d3ba419ff475b2d64e51023b913f1

  • SSDEEP

    98304:2YR3VWuTVhd3dIrL7or+7qpfHvrXhWeP9Mrg:2YR3AWjdIrArcaHLvMg

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • file.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections