Overview

overview

10

Static

static

10

003c78df2e...13.exe

windows7-x64

10

003c78df2e...13.exe

windows10-2004-x64

10

Resubmissions

16-04-2024 08:53

240416-ktedfsff7w 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    003c78df2e77687e1b28a9b498152cff4ce27ab0bef5f65b3a2c00b37ef49c13.exe

  • Size

    697KB

  • Sample

    240412-bc4scaae32

  • MD5

    8ab428444842653c6ebf5a71f14f80e2

  • SHA1

    780f71e211c5dbe9e37805fdcbaf88359651f7b2

  • SHA256

    003c78df2e77687e1b28a9b498152cff4ce27ab0bef5f65b3a2c00b37ef49c13

  • SHA512

    37bf000a2407a9eac7d8006fec624de07e036c6ec711e95ef15b749cb532a762af2c822089e9f25a3b450a1a9b335ce4193c9a57fc6219054569bf1997e9f79d

  • SSDEEP

    12288:jJFKeIV/ORw6mBTCz2BqbKKsobl9XGzwHJeL7dIh89zwHJeo:HC+hbK5ox9XcwpeLkmwpeo

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      003c78df2e77687e1b28a9b498152cff4ce27ab0bef5f65b3a2c00b37ef49c13.exe

    • Size

      697KB

    • MD5

      8ab428444842653c6ebf5a71f14f80e2

    • SHA1

      780f71e211c5dbe9e37805fdcbaf88359651f7b2

    • SHA256

      003c78df2e77687e1b28a9b498152cff4ce27ab0bef5f65b3a2c00b37ef49c13

    • SHA512

      37bf000a2407a9eac7d8006fec624de07e036c6ec711e95ef15b749cb532a762af2c822089e9f25a3b450a1a9b335ce4193c9a57fc6219054569bf1997e9f79d

    • SSDEEP

      12288:jJFKeIV/ORw6mBTCz2BqbKKsobl9XGzwHJeL7dIh89zwHJeo:HC+hbK5ox9XcwpeLkmwpeo

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Detects executables packed with SmartAssembly

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scheduled Task/Job

1
T1053

Persistence

Scheduled Task/Job

1
T1053

Privilege Escalation

Scheduled Task/Job

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks