General

  • Target

    a8f21ffc9630c023fd163af0da7ead26.bin

  • Size

    2.8MB

  • MD5

    58070ea56a7a69dff1087c35aadb0edc

  • SHA1

    b6d306f78b7fa26851b1e901c21c21adf6c6bfdb

  • SHA256

    5095d4e5fbce765e4349c92ce44bce30b0929104101b2535c1a68667248ff1d2

  • SHA512

    837a2978bf92a9efffc1aaa034632ac19980a2b4ed6c8b54629f461289ff11befd50b0dcbe46a96b6f83a7248203663f6e9f4e360301b937083a56f06c1f33b8

  • SSDEEP

    49152:sh3KEFKhAC6hpMJR0X8s0uKqZUuYvFPCIXqaqod6arGE7t8xCmx803F:sh2h6QqXCoUBvVfqobGWaZm0V

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

Files

  • a8f21ffc9630c023fd163af0da7ead26.bin
    .zip

    Password: infected

  • efc1cf307c9475a3c3ffdf3fcdeac5a712c9863242a2bbb043d64c25a143d0df.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections