General

  • Target

    e88f0c18b270a4394e8e3b9321395ef4346bf0962ea2adc25eecdc02195f738e.exe

  • Size

    1.8MB

  • MD5

    f0bbe487784a0f95a5d510062282faf8

  • SHA1

    41a844ba07682d76956f2f7fdbad0874a42a5865

  • SHA256

    e88f0c18b270a4394e8e3b9321395ef4346bf0962ea2adc25eecdc02195f738e

  • SHA512

    2e6559291a2a9c607989f8faa83d6b8c217e96028f05b737f596ed149da9569f63e49547b5c89b9986755d85826d74383157acdaa12ff9bb4e41c862f90fa7b0

  • SSDEEP

    24576:pSg0AqI+tXoAHtibewt8amOYKEJSxrR4rI/iepDChMLPDlbZ655u6NMkaSn60K4w:p8VfsiomOjFmEUyLPDlbM6+6B4

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Detects executables packed with unregistered version of .NET Reactor 1 IoCs
  • Zgrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e88f0c18b270a4394e8e3b9321395ef4346bf0962ea2adc25eecdc02195f738e.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections