Overview

overview

10

Static

static

10

Zeus V3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Zeus V3.exe

  • Size

    44.2MB

  • Sample

    240421-dbb22shd3w

  • MD5

    3e1ad6a2ea23c2d1d1e3b5b171ef2f56

  • SHA1

    397246de92972c06527e92ad64395baec6760049

  • SHA256

    8e96c53eea3cbb5be49dcafc17f3d9e20dba6ca88772c9ee24f3f3a02c7ca251

  • SHA512

    74eb2c8f6004aeccd1c285a84f34f478338c45f21161c6cb47884bed77e2b52e57bb8cc4a613f06e01fdc40a80b7b2f40bc5b8dfdabba0e229aad083d85936ff

  • SSDEEP

    786432:scWMMOFqEmlkw+/frgoKp00UNmqufqKukdwnhTAj5WLwbJORClGIokGhB:9FLqEmeP/3KpINS/MAjPf4

Score
10/10
zgratagilenetratvmprotect

Malware Config

Targets

    • Target

      Zeus V3.exe

    • Size

      44.2MB

    • MD5

      3e1ad6a2ea23c2d1d1e3b5b171ef2f56

    • SHA1

      397246de92972c06527e92ad64395baec6760049

    • SHA256

      8e96c53eea3cbb5be49dcafc17f3d9e20dba6ca88772c9ee24f3f3a02c7ca251

    • SHA512

      74eb2c8f6004aeccd1c285a84f34f478338c45f21161c6cb47884bed77e2b52e57bb8cc4a613f06e01fdc40a80b7b2f40bc5b8dfdabba0e229aad083d85936ff

    • SSDEEP

      786432:scWMMOFqEmlkw+/frgoKp00UNmqufqKukdwnhTAj5WLwbJORClGIokGhB:9FLqEmeP/3KpINS/MAjPf4

    Score
    10/10
    zgratagilenetratvmprotect

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1

MITRE ATT&CK Matrix

Tasks