General

  • Target

    https://www.mediafire.com/file/fv9veoyx2lf2x66/GX_Image_Logger.zip/file

  • Sample

    240207-h47fwaffbk

Malware Config

Extracted

Family

growtopia

C2

https://discord.com/api/webhooks/1199763266872803338/8vedcXoMcyExhe1xhBm5f8ncmafWmOB3pkulE0l8g9Pel0t3ziyr2V51cLTVEjYsE4Rj

Targets

    • Target

      https://www.mediafire.com/file/fv9veoyx2lf2x66/GX_Image_Logger.zip/file

    • Detect ZGRat V1

    • Growtopia

      Growtopa is an opensource modular stealer written in C#.

    • ZGRat

      ZGRat is remote access trojan written in C#.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks