General

  • Target

    c829be0e78641329583de11672027a67cb3fc2ba31059e258a87001953b8f4ac.exe

  • Size

    774KB

  • MD5

    b68ced78e1348de3af3fb2052aa4f1a1

  • SHA1

    c974c8857a1aecba0347280c3f6eff561a2f3fb5

  • SHA256

    c829be0e78641329583de11672027a67cb3fc2ba31059e258a87001953b8f4ac

  • SHA512

    da54d1e31d0dc20730dff2eca07ea8517812986bb337335078f189b3008f49360c09c0b38006827984023a79256c7f0eedc334fcadfb26c05dcb962c28e8f479

  • SSDEEP

    12288:rypQrulqgXsBry3Bd/7f9b7ekLKOXlpGtaKksX5VjofTYj2LMVUxa7dSItGx:xrGbcByj7fBektXlpGLJJ+C2wu0xtGx

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Detects executables packed with unregistered version of .NET Reactor 1 IoCs
  • Zgrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c829be0e78641329583de11672027a67cb3fc2ba31059e258a87001953b8f4ac.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections