Overview

overview

10

Static

static

1

2306a778ad...6b.exe

windows7-x64

10

2306a778ad...6b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2306a778adcf141db023e4aba49983ec16bfd1a88b0b1a59ac1a58a704dffe6b.exe

  • Size

    6.3MB

  • Sample

    240229-fz2nqaeg3z

  • MD5

    a344d711eee57a20c4c56f3c642c7e2e

  • SHA1

    d33b2efc719e6ede1af89db826b47315595c5cad

  • SHA256

    2306a778adcf141db023e4aba49983ec16bfd1a88b0b1a59ac1a58a704dffe6b

  • SHA512

    70ea781f9679f1ea94785e750c5df5a35c7b7c1efe88daa731170287bd271e49177910b00e54a7bc3da852e4b0237b551c8a1b9e88aa320a459bde1a6cdf958b

  • SSDEEP

    49152:ZLL7HtK37BJNrmPws6bQuudtyA9Cqs6MiiIcu1TZmw8qn5KIXHAZ9rgxy:lYJNrmPvbhi/qK6LHAZ9yy

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      2306a778adcf141db023e4aba49983ec16bfd1a88b0b1a59ac1a58a704dffe6b.exe

    • Size

      6.3MB

    • MD5

      a344d711eee57a20c4c56f3c642c7e2e

    • SHA1

      d33b2efc719e6ede1af89db826b47315595c5cad

    • SHA256

      2306a778adcf141db023e4aba49983ec16bfd1a88b0b1a59ac1a58a704dffe6b

    • SHA512

      70ea781f9679f1ea94785e750c5df5a35c7b7c1efe88daa731170287bd271e49177910b00e54a7bc3da852e4b0237b551c8a1b9e88aa320a459bde1a6cdf958b

    • SSDEEP

      49152:ZLL7HtK37BJNrmPws6bQuudtyA9Cqs6MiiIcu1TZmw8qn5KIXHAZ9rgxy:lYJNrmPvbhi/qK6LHAZ9yy

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks