General

  • Target

    mmpack.rar

  • Size

    62.3MB

  • MD5

    052ee19e1fc072d99171bc0a106d9aa3

  • SHA1

    b26c11ca077ca76b84565c667be263ae6c4097b5

  • SHA256

    12293a8e948241253ef2e842ef5c723597d3f15296f3674d253387faac7f2320

  • SHA512

    da1c3197a508d48ba354c55821d359b3463827dec1665b58922228797c1c72d947b5cc4f96b1e1479f3bd04defa9af5c338e6bff1462ed668c0583e559566724

  • SSDEEP

    1572864:FWXWYpXjBasuEn6yWF9imOyWhkqzTqAuUl/gx/Y:sXflapEN0cmWh3aRU1gi

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

Files

  • mmpack.rar
    .rar

    Password: crackpass

  • mmpack/App/am.pak
  • mmpack/App/en-GB.pak
  • mmpack/App/preloaded_data.pb
  • mmpack/App/swiftshader/dll/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    Password: crackpass

    7466b86b241e6faa3c539091b280b3a3


    Headers

    Imports

    Exports

    Sections

  • mmpack/App/swiftshader/dll/updater.ini
  • mmpack/App/swiftshader/libGLESv2.dll
  • mmpack/App/swiftshader/updater.ini
  • mmpack/Data/Language/en-US.pak
  • mmpack/Data/Language/eventlog_provider.dll
    .dll windows:5 windows x64 arch:x64

    Password: crackpass


    Code Sign

    Headers

    Exports

    Sections

  • mmpack/Data/Language/libGLESv2.dll
  • mmpack/Data/Language/local_de_DE.cfg
  • mmpack/Data/Language/local_en_US.cfg
  • mmpack/Data/Language/local_fr_FR.cfg
  • mmpack/Data/Language/widevinecdm.dll.sig
  • mmpack/Data/plugins/imageformats/evac2.unity3d
  • mmpack/Data/plugins/imageformats/qgif.dll
    .dll windows:4 windows x86 arch:x86

    Password: crackpass

    7653b36b0ce75549f1dd2e71e855c439


    Headers

    Imports

    Exports

    Sections

  • mmpack/Data/plugins/imageformats/qicns.dll
    .dll windows:4 windows x86 arch:x86

    Password: crackpass

    a76aa0eb2834d44bc8327381ee8fd3b5


    Headers

    Imports

    Exports

    Sections

  • mmpack/Data/plugins/imageformats/qico.dll
    .dll windows:4 windows x86 arch:x86

    Password: crackpass

    eacb91ad6286737de37579dedec05a1d


    Headers

    Imports

    Exports

    Sections

  • mmpack/Data/plugins/imageformats/qtiff.dll
    .dll windows:4 windows x86 arch:x86

    Password: crackpass

    2cb92f3a647830c67d65841eb6bbffe2


    Headers

    Imports

    Exports

    Sections

  • mmpack/Data/plugins/imageformats/qwebp.dll
    .dll windows:4 windows x86 arch:x86

    Password: crackpass

    5bb5c36a023b102c4c773e41573a30c4


    Headers

    Imports

    Exports

    Sections

  • mmpack/Data/plugins/mediaservice/dsengine.dll
    .dll windows:4 windows x86 arch:x86

    Password: crackpass

    0c40ec81c57b72ac62305ec7587a0762


    Headers

    Imports

    Exports

    Sections

  • mmpack/Data/plugins/mediaservice/imageformats/dsengine.dll
    .dll windows:4 windows x86 arch:x86

    0c40ec81c57b72ac62305ec7587a0762


    Headers

    Imports

    Exports

    Sections

  • mmpack/Data/plugins/mediaservice/imageformats/qgif.dll
    .dll windows:4 windows x86 arch:x86

    7653b36b0ce75549f1dd2e71e855c439


    Headers

    Imports

    Exports

    Sections

  • mmpack/Data/plugins/platforms/qminimal.dll
    .dll windows:4 windows x86 arch:x86

    b7edfb9962021efbcae5db1b2ab05707


    Headers

    Imports

    Exports

    Sections

  • mmpack/Data/plugins/platforms/qoffscreen.dll
    .dll windows:4 windows x86 arch:x86

    539bd1b48618df5f7816fe6d4563fda8


    Headers

    Imports

    Exports

    Sections

  • mmpack/Data/plugins/platforms/sqldrivers/qsqlite.dll
    .dll windows:4 windows x86 arch:x86

    fbe71bfd4898ae6410e5e788ba7191fa


    Headers

    Imports

    Exports

    Sections

  • mmpack/Data/plugins/platforms/sqldrivers/qsqlmysql.dll
    .dll windows:4 windows x86 arch:x86

    c613e6143199bce8291aa6e56146968e


    Headers

    Imports

    Exports

    Sections

  • mmpack/Data/plugins/sqldrivers/qsqlite.dll
    .dll windows:4 windows x86 arch:x86

    fbe71bfd4898ae6410e5e788ba7191fa


    Headers

    Imports

    Exports

    Sections

  • mmpack/Data/plugins/sqldrivers/qsqlmysql.dll
    .dll windows:4 windows x86 arch:x86

    c613e6143199bce8291aa6e56146968e


    Headers

    Imports

    Exports

    Sections

  • mmpack/Data/plugins/sqldrivers/updater.ini
  • mmpack/Data/translations/qtwebengine_locales/am.pak
  • mmpack/Data/translations/qtwebengine_locales/ar.pak
  • mmpack/Data/translations/qtwebengine_locales/de.pak
  • mmpack/Data/translations/qtwebengine_locales/el.pak
  • mmpack/Data/translations/qtwebengine_locales/en-GB.pak
  • mmpack/Data/translations/qtwebengine_locales/en-US.pak
  • mmpack/Data/translations/qtwebengine_locales/es-419.pak
  • mmpack/Data/translations/qtwebengine_locales/es.pak
  • mmpack/Data/translations/qtwebengine_locales/et.pak
  • mmpack/Data/translations/qtwebengine_locales/fa.pak
  • mmpack/Data/translations/qtwebengine_locales/fi.pak
  • mmpack/Data/translations/qtwebengine_locales/fil.pak
  • mmpack/Data/translations/qtwebengine_locales/fr.pak
  • mmpack/Data/translations/qtwebengine_locales/gu.pak
  • mmpack/Data/translations/qtwebengine_locales/nb.pak
  • mmpack/Data/translations/qtwebengine_locales/nl.pak
  • mmpack/Data/translations/qtwebengine_locales/pl.pak
  • mmpack/Data/translations/qtwebengine_locales/pt-BR.pak
  • mmpack/Data/translations/qtwebengine_locales/pt-PT.pak
  • mmpack/Data/translations/qtwebengine_locales/ta.pak
  • mmpack/Data/translations/qtwebengine_locales/te.pak
  • mmpack/Data/translations/qtwebengine_locales/th.pak
  • mmpack/Data/translations/qtwebengine_locales/tr.pak
  • mmpack/Data/translations/qtwebengine_locales/uk.pak
  • mmpack/Data/translations/qtwebengine_locales/vi.pak
  • mmpack/Data/translations/qtwebengine_locales/zh-CN.pak
  • mmpack/Data/translations/qtwebengine_locales/zh-TW.pak
  • mmpack/Data/translations/updater.ini
  • mmpack/Data/updater.ini
  • mmpack/libGLESv2.dll
  • mmpack/mmpack.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • mmpack/updater.ini