Overview

overview

10

Static

static

1

UGS - CRO ...4).scr

windows7-x64

1

UGS - CRO ...4).scr

windows10-1703-x64

10

UGS - CRO ...4).scr

windows10-2004-x64

10

Resubmissions

19/04/2024, 19:21

240419-x2pwdadh9s 10

19/04/2024, 15:07

240419-shetvafd46 10

19/04/2024, 14:07

240419-re6ygsfb7z 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    UGS - CRO REQ - KHIDUBAI (OPL-841724).scr

  • Size

    36KB

  • Sample

    240419-x2pwdadh9s

  • MD5

    f99dc4d2e045ae0bbc169fff12a5c6d5

  • SHA1

    c3a4a89907201776e9ad38fc63573522e0d233f1

  • SHA256

    e4726c4cad6dd043e87289a51733a6627b2abf1ae88b70458c9674ef4669540c

  • SHA512

    8db711c745807afd34db67b2098229c53da9e884a63d9322d016351dab3cad4d7b283cc43335ef924ba74df44667bf6dc82e04a71396b64d92b64ac4bbf2e8eb

  • SSDEEP

    768:vCKxo5dcWZb35LhlEDSUOxpsFG+NU3hDf:zo5d9Zb35LhlEDSUOXsFG+W3hDf

Score
10/10
zgratpersistencerat

Malware Config

Targets

    • Target

      UGS - CRO REQ - KHIDUBAI (OPL-841724).scr

    • Size

      36KB

    • MD5

      f99dc4d2e045ae0bbc169fff12a5c6d5

    • SHA1

      c3a4a89907201776e9ad38fc63573522e0d233f1

    • SHA256

      e4726c4cad6dd043e87289a51733a6627b2abf1ae88b70458c9674ef4669540c

    • SHA512

      8db711c745807afd34db67b2098229c53da9e884a63d9322d016351dab3cad4d7b283cc43335ef924ba74df44667bf6dc82e04a71396b64d92b64ac4bbf2e8eb

    • SSDEEP

      768:vCKxo5dcWZb35LhlEDSUOxpsFG+NU3hDf:zo5d9Zb35LhlEDSUOXsFG+W3hDf

    Score
    10/10
    zgratpersistencerat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks