General
-
Target
https://www.mediafire.com/file/r599ey99pk4ht8l/Vespy_Reborn.zip/file
-
Sample
240226-1v7z6ahb69
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.mediafire.com/file/r599ey99pk4ht8l/Vespy_Reborn.zip/file
Resource
win10v2004-20240226-en
windows10-2004-x64
18 signatures
600 seconds
Malware Config
Extracted
Family
growtopia
C2
https://discord.com/api/webhooks/1199763266872803338/8vedcXoMcyExhe1xhBm5f8ncmafWmOB3pkulE0l8g9Pel0t3ziyr2V51cLTVEjYsE4Rj
Targets
-
-
Target
https://www.mediafire.com/file/r599ey99pk4ht8l/Vespy_Reborn.zip/file
-
Detect ZGRat V1
-
Creates new service(s)
-
Stops running service(s)
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-