Overview

overview

10

Static

static

3

1254ede011...b8.exe

windows7-x64

10

1254ede011...b8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9eab8c5d7b1f4659a787cc77d571f03b.bin

  • Size

    626KB

  • Sample

    240425-b8ywzadc81

  • MD5

    c753e0fddc5020e90a812d811ddc87fa

  • SHA1

    86589697f0c1622a5b51cad3751b1e2bf4707cc8

  • SHA256

    b4be18117c1092295780f45fe3a105e659ce03db38b8c207290901eb78c70147

  • SHA512

    faf374738cdb4d82fd353bc1277dd56218deb7ad986a0dc35e1173c3c8d80f64fa5fe9e7922b4e1f74bb3f8f4343a615c645de765bbdd9544ff45914c355b45e

  • SSDEEP

    12288:T6hPgr3Wt24SFVfmkbHEyPwdC2P+9kEJtXWTUbAUOp2FMxaqfnVnbLv:Tm4rGtMfmkL3/2WSsWcpM2mhVnbr

Score
10/10
xmrigzgratminerrat

Malware Config

Targets

    • Target

      1254ede011ea7c8ba1658bab1c14877d1a2dc85f8b4e2d04be6c5fc65f1c32b8.exe

    • Size

      632KB

    • MD5

      9eab8c5d7b1f4659a787cc77d571f03b

    • SHA1

      27ce5d456d44b2d0ce994b14b11e8c5ffeabf385

    • SHA256

      1254ede011ea7c8ba1658bab1c14877d1a2dc85f8b4e2d04be6c5fc65f1c32b8

    • SHA512

      1fcfa030dac1c6fb573c614c1564e663086b518fa376ce3bbf90da6b1ecc8d065f91c90d6f6efea23c27efce720b90847869d0eef84ce4939fb1f43d7d0eafd9

    • SSDEEP

      12288:waOcj6gjLcJD/VF3AlAp2jLre/i6g578+3NruqK1lMdMD6QVCh5Iy5C:wuHj4JzQlq2j2/iJ78KNzK1lMCGGCR

    Score
    10/10
    zgratratxmrigminer

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks