Extracted

• • Target
    567c1b49fe11b07455f838eb73cba70615693d71ad22d3e2a5866ebcd2665474
  • Size 396KB
  • SHA256 567c1b49fe11b07455f838eb73cba70615693d71ad22d3e2a5866ebcd2665474
  • MD5 6abaf7e05250df0caf09dc24869ef4d6
  • SHA1 04159ba786bd644ecdf02d761ebb07b543f1bfa4
  • SHA512 632afc68fbe726683d0efd8db0633f3805500cf61b4579356ac8d202be70bba213f25fe6507757ab23c489de5f53d5cdefd0b95925cd29b8588f754bd08383a7
  • SSDEEP 6144:4iKdFPyXpDopFPAWs9Q9NEZRXW4XU3XRkocJoH8YOi8HLoV:lj5DqWQ9qZZWCeRTlcYOT8V
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  sectopratstealczgratratstealertrojan

  • Detect ZGRat V1

  • Detects Arechclient2 RAT

    Arechclient2.

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2