Overview

overview

10

Static

static

10

208a85a9c9...3e.exe

windows7-x64

10

208a85a9c9...3e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    208a85a9c99b7f2fb04ba43184f2dcb193a4766e59458ba8a72e1f27e9fa683e.exe

  • Size

    682KB

  • Sample

    240228-tzxxesgc81

  • MD5

    fd4cd2997e45807e1b02bd5d62ea6e89

  • SHA1

    9cf55329765d18cb2449a2d6b4c6931383293d4d

  • SHA256

    208a85a9c99b7f2fb04ba43184f2dcb193a4766e59458ba8a72e1f27e9fa683e

  • SHA512

    03ce5090a3ed3645c313ec23b8b7417473e99d23fc6b83d5e58bb391228bd795d3c3d52b6a3c6f68db0570659844fd2c20c7133880b08af20e6448e490a0ff86

  • SSDEEP

    12288:uHKv/A8Z5h/lLGTyp3Jcx9PtvwlDSH33jr3wcBurGNj6MR00:uqv/zZDNGTcCIlDU3w8ur26MR

Score
10/10
zgratpersistencerat

Malware Config

Targets

    • Target

      208a85a9c99b7f2fb04ba43184f2dcb193a4766e59458ba8a72e1f27e9fa683e.exe

    • Size

      682KB

    • MD5

      fd4cd2997e45807e1b02bd5d62ea6e89

    • SHA1

      9cf55329765d18cb2449a2d6b4c6931383293d4d

    • SHA256

      208a85a9c99b7f2fb04ba43184f2dcb193a4766e59458ba8a72e1f27e9fa683e

    • SHA512

      03ce5090a3ed3645c313ec23b8b7417473e99d23fc6b83d5e58bb391228bd795d3c3d52b6a3c6f68db0570659844fd2c20c7133880b08af20e6448e490a0ff86

    • SSDEEP

      12288:uHKv/A8Z5h/lLGTyp3Jcx9PtvwlDSH33jr3wcBurGNj6MR00:uqv/zZDNGTcCIlDU3w8ur26MR

    Score
    10/10
    zgratpersistencerat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Detects executables packed with SmartAssembly

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks