General

  • Target

    Korepi.rar

  • Size

    12.0MB

  • MD5

    a466e8627bebfc162f4a31c1f51d04d6

  • SHA1

    8d768f21ce1809b21fbb4d3619c8fd2568e29565

  • SHA256

    a43a21efaadd721cb315f73a71f5ac36b86402a9f2d72e1740042379b54a48ee

  • SHA512

    357dc4bb0265458ac0168afda8e543b46f4c6eb1112e89e47da6d1338e17294992366303549ca20ce8bcdbdccfe9f1fb4b172bb14c3fca0213303d4ffee7bcd3

  • SSDEEP

    196608:NcNyUkbDfZSQJhWAtlI8hcVKsKe9COZhHTge+axEc2VvqCKA0gBMQJaEf/qJnQJU:yoDcoW6OUOXHEyxYQtgBMbEXqIoilc62

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Korepi.rar
    .rar
  • Korepi/Korepi.exe
    .exe windows:5 windows x86 arch:x86

    12e12319f1029ec4f8fcbed7e82df162


    Headers

    Imports

    Sections

  • Korepi/api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Korepi/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Korepi/api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Korepi/api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Korepi/api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Korepi/api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Korepi/api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Korepi/api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Korepi/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Korepi/api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Korepi/api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Korepi/api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • Korepi/concrt140.dll
    .dll windows:6 windows x64 arch:x64

    5f9b23bd4b0029001f687a1ad625be31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Korepi/dbgeng.dll
    .dll windows:6 windows x64 arch:x64

    20a4f08af0efbf58e3cff060b868e54b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Korepi/dbghelp.dll
    .dll windows:6 windows x64 arch:x64

    186bdce03a6f21a10c15ba86219196a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Korepi/dll/dbghelp.dll
    .dll windows:6 windows x64 arch:x64

    186bdce03a6f21a10c15ba86219196a5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Korepi/dll/vivoxsdk.dll
    .dll windows:6 windows x64 arch:x64

    d226ec7151a759ca2700b13d20e2d327


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Korepi/msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    2ba11fd5a511c8a409e705e9ab6b5dc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Korepi/msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    c1687527a3d5b7532fa653f66eba12e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Korepi/msvcp140_2.dll
    .dll windows:6 windows x64 arch:x64

    2f8a18fefaba28c3707dae8605d51b60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Korepi/msvcp140_atomic_wait.dll
    .dll windows:6 windows x64 arch:x64

    c1dfd2e42294117ca33d3c6b21826f93


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Korepi/msvcp140_codecvt_ids.dll
    .dll windows:6 windows x64 arch:x64

    536e29dae203b5f7347030aec0cba513


    Code Sign

    Headers

    Imports

    Exports

    Sections