General

  • Target

    22af77c1abbaf6d3a1d774d08703c354d0c51227488434e6f3b9a56b24088cff

  • Size

    12.3MB

  • MD5

    b18f9f6649246672f6ffd725d6c96b46

  • SHA1

    4db8041c7c58323c94cc2e8e45b8bab1dc024259

  • SHA256

    22af77c1abbaf6d3a1d774d08703c354d0c51227488434e6f3b9a56b24088cff

  • SHA512

    4c69b5e1cf049ada5ae7d3cb16fcb433a1baf3d45500015b2e0c637f2f10003a101def2b785b1740f0c24520f4f11d5d1cf88b6aaf74ddf1e9f82a59343c3660

  • SSDEEP

    196608:Q6fLgegqYXvjw9cEVG96PpexDBCPZuU5mdqHXwk+VxC6zTOU0Z+x6qicrke:QiUegvvjomiIuuU5Xme80j/c7

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • 22af77c1abbaf6d3a1d774d08703c354d0c51227488434e6f3b9a56b24088cff
    .zip
  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/CPUCard_Client.dll
    .dll windows:4 windows x86 arch:x86

    2212a5e0ca5777b8194818ecdcbaa4e1


    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/Ep11ReaderConfig.xml
    .xml
  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/EpKeyThirdHD.dll
    .dll windows:5 windows x86 arch:x86

    ad9a3130a3a12db8ce1ede9f468da877


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/EpKeyThirdTDR.dll
    .dll windows:5 windows x86 arch:x86

    63ca11a02df06a7af7278eaeb59a4a38


    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/EpKeyThirdWQ.dll
    .dll windows:5 windows x86 arch:x86

    33bb2ba5ae13a6ad7cfa3d48f1530b56


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/EpUserParam.ini
  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/EportCrypto.dll
    .dll windows:4 windows x86 arch:x86

    40b6ffab80c8fa4c5df33568a2960601


    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/EportGBDevConfig.xml
    .xml
  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/EportSMWConfig.xml
    .xml
  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/NetOceanSDKLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/OpsP11.dll
    .dll windows:5 windows x86 arch:x86

    db9a36f38b9705b3d0214fae7d2bf3bb


    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/OpsSd.dll
    .dll windows:4 windows x86 arch:x86

    e603567f7f5bb70f400dd803e82410d7


    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/OpsSkf.dll
    .dll windows:5 windows x86 arch:x86

    fed6bf0501bd1d63a1aa6421ef5aed50


    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/SPSecureAPI.dll
    .dll windows:5 windows x86 arch:x86

    6ad7de03f7e9b4a572c0f6be439e01bb


    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/SimpleICAPI.dll
    .dll windows:4 windows x86 arch:x86

    a2ebac614027d8a889d1bac4023597b2


    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/TSSBOnlineAssistant/config
  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/TSSBOnlineAssistant/dll/BouncyCastle.Crypto.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/TSSBOnlineAssistant/dll/COption.dll
    .dll windows:5 windows x86 arch:x86

    9a5e83bca69b5c79e16db1fa2c15c50d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/TSSBOnlineAssistant/dll/Interop.IWshRuntimeLibrary.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/TSSBOnlineAssistant/dll/Microsoft.mshtml.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/USBCrw.dll
    .dll windows:4 windows x86 arch:x86

    4db51b03fac98a933a422b227405f650


    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/UniSkf.dll
    .dll windows:5 windows x86 arch:x86

    e90e2a06e201c9550e1c76bee08c1983


    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/decodecert.dll
    .dll windows:4 windows x86 arch:x86

    b5b64faf3f037e42491fa4635e0d0be2


    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/eptskf.dll
    .dll windows:5 windows x86 arch:x86

    7672847b4c11f7edb8b4adb92a8c9a36


    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/eraEportBasicApp.dll
    .dll windows:5 windows x86 arch:x86

    9ca23cd3bb47280918a6d358abf7ad44


    Headers

    Imports

    Exports

    Sections

  • 电子税务局出口退税管理功能客户端工具/TSSBAssistantMain/电子税务局出口退税管理功能客户端工具.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 电子税务局出口退税管理功能客户端工具/电子税务局出口退税管理功能客户端工具.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections