Overview

overview

10

Static

static

10

WmiPrvSE.exe

windows7-x64

10

WmiPrvSE.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    WmiPrvSE.exe

  • Size

    1.9MB

  • MD5

    d67f722b73a3cbef568a2e3124a4bc04

  • SHA1

    27e0a75a646fb2869b31eab2f34f1de4db7e35e6

  • SHA256

    b83aed8214e0f95cb74b9b2bbc49b16bd46cc46a9ec620a4ab1a3ddbde34c303

  • SHA512

    c050652f2b11f4ad3ff9832f894ae6ada16400c41576b64e9bcfa2b785f15987b7d846f9bb597c4495edad91b4c67a8d601d5757afee39ed890148461f6de9bb

  • SSDEEP

    24576:AEtP/SRdxjxY8eCpDbZXvSBNOjABV+m/dynu46+I9KTVQpeeKghOb7XYFtRKdcaB:rj8ZbkNF0m/0vV1eKghUYFtML/sJ

Score
10/10
zgrat

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
    zgrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WmiPrvSE.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections