Overview

overview

10

Static

static

3

PURCHASE O...25.exe

windows7-x64

10

PURCHASE O...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PURCHASE ORDER No POCON18025.exe

  • Size

    1.2MB

  • Sample

    240220-z5z7mafa5y

  • MD5

    4aa969c1523e3469cdde09229e8d5295

  • SHA1

    d6f561eaf676d924c733c5d36a4d59cf93c01546

  • SHA256

    7c13fcd7e8a3212b17e4d80b4497de57c5e05997e711e8135f03670562b3c3de

  • SHA512

    d2068902780076d58985162762b62072004c139f89f34d05b05f1a2f0c8dfadcc51da7adc75deaf24041722be10f350f52b204d13a88c626efa456cb1ba7befb

  • SSDEEP

    24576:L3zAWOa3I/MOe2vRFvRo5Dtti7EQFVMTXcGN:BlOeejRsKEyVMY

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      PURCHASE ORDER No POCON18025.exe

    • Size

      1.2MB

    • MD5

      4aa969c1523e3469cdde09229e8d5295

    • SHA1

      d6f561eaf676d924c733c5d36a4d59cf93c01546

    • SHA256

      7c13fcd7e8a3212b17e4d80b4497de57c5e05997e711e8135f03670562b3c3de

    • SHA512

      d2068902780076d58985162762b62072004c139f89f34d05b05f1a2f0c8dfadcc51da7adc75deaf24041722be10f350f52b204d13a88c626efa456cb1ba7befb

    • SSDEEP

      24576:L3zAWOa3I/MOe2vRFvRo5Dtti7EQFVMTXcGN:BlOeejRsKEyVMY

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks