General

  • Target

    ExternalMenu24.rar

  • Size

    70.7MB

  • MD5

    91bd3f94b23e01061f2d414c4c831f8b

  • SHA1

    518371649127969484adf45942616679762886a0

  • SHA256

    e6fb138dbb7173a207a4dcec1fab48f1ab6852c6fb1d0ead9b44dc627c5a396c

  • SHA512

    25b9abf74afa0bc7f117aa9623a05624eae0b6f236bada4edc63030382c73b099f8bc92e1a753ebcb452356cd6c60f9e35f61f118ec336fcb94242c276014100

  • SSDEEP

    1572864:P7hAoOMpRQw8G+SPmT3S+QiDnh3igvsh6LTeT7FsRBi/VB62ikvUPlYJzm8:Thp4w+SPmTT3Dv46WTBsRP2VUPCM8

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • Unsigned PE 77 IoCs

    Checks for missing Authenticode signature.

Files

  • ExternalMenu24.rar
    .rar

    Password: external24

  • ExternalMenu24/App/am.pak
  • ExternalMenu24/App/dlc/ini.ini
  • ExternalMenu24/App/dlc/updater.ini
  • ExternalMenu24/App/swiftshader/ar.pak
  • ExternalMenu24/App/swiftshader/dll/ar.pak
  • ExternalMenu24/App/swiftshader/dll/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    Password: external24

    b85270df2817667c40fde4ad43f6b7a8


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/App/swiftshader/dll/updater.ini
  • ExternalMenu24/App/swiftshader/en-US.pak
  • ExternalMenu24/App/swiftshader/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    Password: external24

    b85270df2817667c40fde4ad43f6b7a8


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/App/swiftshader/updater.ini
  • ExternalMenu24/App/updater.ini
  • ExternalMenu24/Data/Language/ar.pak
  • ExternalMenu24/Data/Language/bn.pak
  • ExternalMenu24/Data/Language/ca.pak
  • ExternalMenu24/Data/Language/da.pak
  • ExternalMenu24/Data/Language/de.pak
  • ExternalMenu24/Data/Language/el.pak
  • ExternalMenu24/Data/Language/es-419.pak
  • ExternalMenu24/Data/Language/et.pak
  • ExternalMenu24/Data/Language/fa.pak
  • ExternalMenu24/Data/Language/fi.pak
  • ExternalMenu24/Data/Language/fr.pak
  • ExternalMenu24/Data/Language/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    Password: external24

    b85270df2817667c40fde4ad43f6b7a8


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/mediaservice/dsengine.dll
    .dll windows:4 windows x86 arch:x86

    Password: external24

    0c40ec81c57b72ac62305ec7587a0762


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/mediaservice/qsqlite.dll
    .dll windows:4 windows x86 arch:x86

    Password: external24

    fbe71bfd4898ae6410e5e788ba7191fa


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/mediaservice/qtmedia_audioengine.dll
    .dll windows:4 windows x86 arch:x86

    Password: external24

    b2a21c6e4d222e8738fbc6b14dd104d4


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/bearer/dsengine.dll
    .dll windows:4 windows x86 arch:x86

    Password: external24

    0c40ec81c57b72ac62305ec7587a0762


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/bearer/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    Password: external24

    7466b86b241e6faa3c539091b280b3a3


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/bearer/qgif.dll
    .dll windows:4 windows x86 arch:x86

    7653b36b0ce75549f1dd2e71e855c439


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/bearer/qicns.dll
    .dll windows:4 windows x86 arch:x86

    a76aa0eb2834d44bc8327381ee8fd3b5


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/bearer/qico.dll
    .dll windows:4 windows x86 arch:x86

    eacb91ad6286737de37579dedec05a1d


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/bearer/qjpeg.dll
    .dll windows:4 windows x86 arch:x86

    727f454bd46c7922bce36438534aa643


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/bearer/qsqlite.dll
    .dll windows:4 windows x86 arch:x86

    fbe71bfd4898ae6410e5e788ba7191fa


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/bearer/qsqlmysql.dll
    .dll windows:4 windows x86 arch:x86

    c613e6143199bce8291aa6e56146968e


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/bearer/qsqlodbc.dll
    .dll windows:4 windows x86 arch:x86

    a00c3c3c54c64372cad0e7ae533bcfd3


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/bearer/qsqlpsql.dll
    .dll windows:4 windows x86 arch:x86

    2396d645c9c1aad3f8d4eec899c954b2


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/bearer/qsvg.dll
    .dll windows:4 windows x86 arch:x86

    b21a782cb77ae45f85aa9c595ec10a0b


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/bearer/qtmedia_audioengine.dll
    .dll windows:4 windows x86 arch:x86

    b2a21c6e4d222e8738fbc6b14dd104d4


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/dsengine.dll
    .dll windows:4 windows x86 arch:x86

    0c40ec81c57b72ac62305ec7587a0762


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/dsengine.dll
    .dll windows:4 windows x86 arch:x86

    0c40ec81c57b72ac62305ec7587a0762


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    7466b86b241e6faa3c539091b280b3a3


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/libGLESv2.dll
  • ExternalMenu24/Data/plugins/imageformats/mediaservice/dsengine.dll
    .dll windows:4 windows x86 arch:x86

    0c40ec81c57b72ac62305ec7587a0762


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/mediaservice/qico.dll
    .dll windows:4 windows x86 arch:x86

    eacb91ad6286737de37579dedec05a1d


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/mediaservice/qjpeg.dll
    .dll windows:4 windows x86 arch:x86

    727f454bd46c7922bce36438534aa643


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/mediaservice/qsqlite.dll
    .dll windows:4 windows x86 arch:x86

    fbe71bfd4898ae6410e5e788ba7191fa


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/mediaservice/qsqlmysql.dll
    .dll windows:4 windows x86 arch:x86

    c613e6143199bce8291aa6e56146968e


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/mediaservice/qsqlodbc.dll
    .dll windows:4 windows x86 arch:x86

    a00c3c3c54c64372cad0e7ae533bcfd3


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/mediaservice/qsqlpsql.dll
    .dll windows:4 windows x86 arch:x86

    2396d645c9c1aad3f8d4eec899c954b2


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/mediaservice/qsvg.dll
    .dll windows:4 windows x86 arch:x86

    b21a782cb77ae45f85aa9c595ec10a0b


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/mediaservice/qtmedia_audioengine.dll
    .dll windows:4 windows x86 arch:x86

    b2a21c6e4d222e8738fbc6b14dd104d4


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/qgif.dll
    .dll windows:4 windows x86 arch:x86

    7653b36b0ce75549f1dd2e71e855c439


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/qicns.dll
    .dll windows:4 windows x86 arch:x86

    a76aa0eb2834d44bc8327381ee8fd3b5


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/qico.dll
    .dll windows:4 windows x86 arch:x86

    eacb91ad6286737de37579dedec05a1d


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/qjpeg.dll
    .dll windows:4 windows x86 arch:x86

    727f454bd46c7922bce36438534aa643


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/qsqlite.dll
    .dll windows:4 windows x86 arch:x86

    fbe71bfd4898ae6410e5e788ba7191fa


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/qsqlmysql.dll
    .dll windows:4 windows x86 arch:x86

    c613e6143199bce8291aa6e56146968e


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/qsqlodbc.dll
    .dll windows:4 windows x86 arch:x86

    a00c3c3c54c64372cad0e7ae533bcfd3


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/qsqlpsql.dll
    .dll windows:4 windows x86 arch:x86

    2396d645c9c1aad3f8d4eec899c954b2


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/qsvg.dll
    .dll windows:4 windows x86 arch:x86

    b21a782cb77ae45f85aa9c595ec10a0b


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/imageformats/qtmedia_audioengine.dll
    .dll windows:4 windows x86 arch:x86

    b2a21c6e4d222e8738fbc6b14dd104d4


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/mediaservice/dsengine.dll
    .dll windows:4 windows x86 arch:x86

    0c40ec81c57b72ac62305ec7587a0762


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/mediaservice/qico.dll
    .dll windows:4 windows x86 arch:x86

    eacb91ad6286737de37579dedec05a1d


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/mediaservice/qjpeg.dll
    .dll windows:4 windows x86 arch:x86

    727f454bd46c7922bce36438534aa643


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/mediaservice/qsqlite.dll
    .dll windows:4 windows x86 arch:x86

    fbe71bfd4898ae6410e5e788ba7191fa


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/mediaservice/qsqlmysql.dll
    .dll windows:4 windows x86 arch:x86

    c613e6143199bce8291aa6e56146968e


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/mediaservice/qsqlodbc.dll
    .dll windows:4 windows x86 arch:x86

    a00c3c3c54c64372cad0e7ae533bcfd3


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/mediaservice/qsqlpsql.dll
    .dll windows:4 windows x86 arch:x86

    2396d645c9c1aad3f8d4eec899c954b2


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/mediaservice/qsvg.dll
    .dll windows:4 windows x86 arch:x86

    b21a782cb77ae45f85aa9c595ec10a0b


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/mediaservice/qtmedia_audioengine.dll
    .dll windows:4 windows x86 arch:x86

    b2a21c6e4d222e8738fbc6b14dd104d4


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/qgif.dll
    .dll windows:4 windows x86 arch:x86

    7653b36b0ce75549f1dd2e71e855c439


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/qicns.dll
    .dll windows:4 windows x86 arch:x86

    a76aa0eb2834d44bc8327381ee8fd3b5


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/qico.dll
    .dll windows:4 windows x86 arch:x86

    eacb91ad6286737de37579dedec05a1d


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/qsqlite.dll
    .dll windows:4 windows x86 arch:x86

    fbe71bfd4898ae6410e5e788ba7191fa


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/qsqlodbc.dll
    .dll windows:4 windows x86 arch:x86

    a00c3c3c54c64372cad0e7ae533bcfd3


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/sqldrivers/dsengine.dll
    .dll windows:4 windows x86 arch:x86

    0c40ec81c57b72ac62305ec7587a0762


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/sqldrivers/evac2.unity3d
  • ExternalMenu24/Data/plugins/sqldrivers/qgif.dll
    .dll windows:4 windows x86 arch:x86

    7653b36b0ce75549f1dd2e71e855c439


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/sqldrivers/qicns.dll
    .dll windows:4 windows x86 arch:x86

    a76aa0eb2834d44bc8327381ee8fd3b5


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/sqldrivers/qico.dll
    .dll windows:4 windows x86 arch:x86

    eacb91ad6286737de37579dedec05a1d


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/sqldrivers/qjpeg.dll
    .dll windows:4 windows x86 arch:x86

    727f454bd46c7922bce36438534aa643


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/sqldrivers/qsqlite.dll
    .dll windows:4 windows x86 arch:x86

    fbe71bfd4898ae6410e5e788ba7191fa


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/sqldrivers/qsqlmysql.dll
    .dll windows:4 windows x86 arch:x86

    c613e6143199bce8291aa6e56146968e


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/sqldrivers/qsqlodbc.dll
    .dll windows:4 windows x86 arch:x86

    a00c3c3c54c64372cad0e7ae533bcfd3


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/sqldrivers/qsqlpsql.dll
    .dll windows:4 windows x86 arch:x86

    2396d645c9c1aad3f8d4eec899c954b2


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/sqldrivers/qsvg.dll
    .dll windows:4 windows x86 arch:x86

    b21a782cb77ae45f85aa9c595ec10a0b


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/plugins/sqldrivers/qtmedia_audioengine.dll
    .dll windows:4 windows x86 arch:x86

    b2a21c6e4d222e8738fbc6b14dd104d4


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/translations/qtwebengine_locales/am.pak
  • ExternalMenu24/Data/translations/qtwebengine_locales/plugins/bearer/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    7466b86b241e6faa3c539091b280b3a3


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/translations/qtwebengine_locales/plugins/bearer/qwbmp.dll
    .dll windows:4 windows x86 arch:x86

    df125dd6a5d0b84b0001ef6ab9dc6bc5


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/translations/qtwebengine_locales/plugins/imageformats/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    7466b86b241e6faa3c539091b280b3a3


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/translations/qtwebengine_locales/plugins/imageformats/libGLESv2.dll
  • ExternalMenu24/Data/translations/qtwebengine_locales/plugins/imageformats/qicns.dll
    .dll windows:4 windows x86 arch:x86

    a76aa0eb2834d44bc8327381ee8fd3b5


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/translations/qtwebengine_locales/plugins/imageformats/qico.dll
    .dll windows:4 windows x86 arch:x86

    eacb91ad6286737de37579dedec05a1d


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/translations/qtwebengine_locales/plugins/imageformats/qjpeg.dll
    .dll windows:4 windows x86 arch:x86

    727f454bd46c7922bce36438534aa643


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/translations/qtwebengine_locales/plugins/imageformats/qwbmp.dll
    .dll windows:4 windows x86 arch:x86

    df125dd6a5d0b84b0001ef6ab9dc6bc5


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/translations/qtwebengine_locales/plugins/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    7466b86b241e6faa3c539091b280b3a3


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/translations/qtwebengine_locales/plugins/qicns.dll
    .dll windows:4 windows x86 arch:x86

    a76aa0eb2834d44bc8327381ee8fd3b5


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/translations/qtwebengine_locales/plugins/qico.dll
    .dll windows:4 windows x86 arch:x86

    eacb91ad6286737de37579dedec05a1d


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/translations/qtwebengine_locales/plugins/qjpeg.dll
    .dll windows:4 windows x86 arch:x86

    727f454bd46c7922bce36438534aa643


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/translations/qtwebengine_locales/plugins/qwbmp.dll
    .dll windows:4 windows x86 arch:x86

    df125dd6a5d0b84b0001ef6ab9dc6bc5


    Headers

    Imports

    Exports

    Sections

  • ExternalMenu24/Data/translations/qtwebengine_locales/te.pak
  • ExternalMenu24/External2.4.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • ExternalMenu24/libGLEv2.dll
  • ExternalMenu24/updater.ini