Overview

overview

10

Static

static

3

c176dc97ad...ca.exe

windows7-x64

10

c176dc97ad...ca.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c176dc97ad20124dcea4355480b624ca

  • Size

    363KB

  • Sample

    240311-ypjdhacg51

  • MD5

    c176dc97ad20124dcea4355480b624ca

  • SHA1

    8e0834c92e3aff1525c0b63d0ec3ed87745a58fc

  • SHA256

    4444a5ac06c44f49d8fbbc479e6f32344aea793f6319c9ffa58574303e273710

  • SHA512

    7bc1ab18f5e547ad0c74330229328a3da5529a1e1f0ab2893ef5d85de67556054262f6ffe42a8040db6bb90b3599e0a4e758b54f5327002361b078c2101a23a3

  • SSDEEP

    6144:HRHDwUs2xNFmemgjI0ZTtsmYUAtOPIRoL4gqzHisw6gIfriN+GTXayCDbxwLHyz:10UDwuVTqm9AYPIRW4gq2scIfrisyGxY

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      c176dc97ad20124dcea4355480b624ca

    • Size

      363KB

    • MD5

      c176dc97ad20124dcea4355480b624ca

    • SHA1

      8e0834c92e3aff1525c0b63d0ec3ed87745a58fc

    • SHA256

      4444a5ac06c44f49d8fbbc479e6f32344aea793f6319c9ffa58574303e273710

    • SHA512

      7bc1ab18f5e547ad0c74330229328a3da5529a1e1f0ab2893ef5d85de67556054262f6ffe42a8040db6bb90b3599e0a4e758b54f5327002361b078c2101a23a3

    • SSDEEP

      6144:HRHDwUs2xNFmemgjI0ZTtsmYUAtOPIRoL4gqzHisw6gIfriN+GTXayCDbxwLHyz:10UDwuVTqm9AYPIRW4gq2scIfrisyGxY

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks