Overview

overview

10

Static

static

3

installerwn.exe

windows7-x64

10

Resubmissions

18/04/2024, 18:43

240418-xdeeqsch4t 10

12/03/2024, 17:54

240312-wg6gyshd77 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    installerwn.exe

  • Size

    3.7MB

  • Sample

    240418-xdeeqsch4t

  • MD5

    d4a600901a6a14b13b019b17a2101aba

  • SHA1

    bcbb3a94fc0c8560580f32130f6f10e535ae205c

  • SHA256

    c35426dfbfbf28bf2f408ed265f1a248d45c27d439f1b913fd7d4da299c284b9

  • SHA512

    99b2573580b90eaf190818fad8310365c508468cbaebe197860ad8e037e72f604784e157245fc20413956fa6c55bf4643e3ebf279190324fb3eea7c7ad59091f

  • SSDEEP

    49152:a2C+Jdpu3bzRoFQBHHTRdGwdTNA3qENNLZsDlZbMSlraAyuO0Bm2rZKHt:

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      installerwn.exe

    • Size

      3.7MB

    • MD5

      d4a600901a6a14b13b019b17a2101aba

    • SHA1

      bcbb3a94fc0c8560580f32130f6f10e535ae205c

    • SHA256

      c35426dfbfbf28bf2f408ed265f1a248d45c27d439f1b913fd7d4da299c284b9

    • SHA512

      99b2573580b90eaf190818fad8310365c508468cbaebe197860ad8e037e72f604784e157245fc20413956fa6c55bf4643e3ebf279190324fb3eea7c7ad59091f

    • SSDEEP

      49152:a2C+Jdpu3bzRoFQBHHTRdGwdTNA3qENNLZsDlZbMSlraAyuO0Bm2rZKHt:

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks