Overview

overview

10

Static

static

10

3a45c34fcd...e8.exe

windows7-x64

10

3a45c34fcd...e8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a45c34fcd2c22c52eaf7b11e1b76b6895043f1c714d0674e0666493d39e55e8

  • Size

    5.7MB

  • Sample

    240206-vh2dysdcep

  • MD5

    0a8cc5c964c43f0ed0170ead67c4602d

  • SHA1

    1048b45bb59628ead5cffab099f217f422c25c9a

  • SHA256

    3a45c34fcd2c22c52eaf7b11e1b76b6895043f1c714d0674e0666493d39e55e8

  • SHA512

    100f1ab123172a09ebe232a4e22dbcda66294df9259c18da7fabee2c072ef8489a9ad473c47ca48ca7d712249f3b09ce44508fe16e4ff0e23b0a47dd34b92daa

  • SSDEEP

    98304:WeQvusTfg5ngazFFo6gy4ve6ZkD81Jo12b5DwqFapmkv:WeKdTfglgazFFofy4v1MEipqIj

Score
10/10
sectopratzgratrattrojan

Malware Config

Targets

    • Target

      3a45c34fcd2c22c52eaf7b11e1b76b6895043f1c714d0674e0666493d39e55e8

    • Size

      5.7MB

    • MD5

      0a8cc5c964c43f0ed0170ead67c4602d

    • SHA1

      1048b45bb59628ead5cffab099f217f422c25c9a

    • SHA256

      3a45c34fcd2c22c52eaf7b11e1b76b6895043f1c714d0674e0666493d39e55e8

    • SHA512

      100f1ab123172a09ebe232a4e22dbcda66294df9259c18da7fabee2c072ef8489a9ad473c47ca48ca7d712249f3b09ce44508fe16e4ff0e23b0a47dd34b92daa

    • SSDEEP

      98304:WeQvusTfg5ngazFFo6gy4ve6ZkD81Jo12b5DwqFapmkv:WeKdTfglgazFFofy4v1MEipqIj

    Score
    10/10
    sectopratzgratrattrojan

    • Detect ZGRat V1

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

      trojanratsectoprat

    • SectopRAT payload

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks