Overview

overview

10

Static

static

3

Fzonsvup.exe

windows7-x64

10

Fzonsvup.exe

windows10-2004-x64

10

User tags

Assigned on submission by the user, not by sandbox detections.

Threatview.io Proactive Hunter

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Fzonsvup.exe.2

  • Size

    633KB

  • Sample

    240425-gd99eagc8w

  • MD5

    1c762a2cd186f1cde4b9e5d743eca3b5

  • SHA1

    a0eff9fa7b5ada96c8acf483de9519a9e2548d80

  • SHA256

    a5b0d190fc09cd5c1ea07fa6b12a7dd4ab5f517c778fb60e4e14060e00ddecc8

  • SHA512

    d43eec5905f9715c6b342232c2432ba1e91abe4ee514ccdc45706a7ffede2a1cf5589c0da7a0f5d6c70a8a26afad9394aa93222f475be4797607d7c0208d154a

  • SSDEEP

    12288:NgJ7AuurlRyI4mfcYmFlEBJo8S21j7YIwIPfZ3FjILSdAsBJWWZ8lz/:NgJ7ABrlCTBFlEBJNYpIZ3Fw0AEJWWZM

Score
10/10
xmrigzgratminerrat

Malware Config

Targets

    • Target

      Fzonsvup.exe.2

    • Size

      633KB

    • MD5

      1c762a2cd186f1cde4b9e5d743eca3b5

    • SHA1

      a0eff9fa7b5ada96c8acf483de9519a9e2548d80

    • SHA256

      a5b0d190fc09cd5c1ea07fa6b12a7dd4ab5f517c778fb60e4e14060e00ddecc8

    • SHA512

      d43eec5905f9715c6b342232c2432ba1e91abe4ee514ccdc45706a7ffede2a1cf5589c0da7a0f5d6c70a8a26afad9394aa93222f475be4797607d7c0208d154a

    • SSDEEP

      12288:NgJ7AuurlRyI4mfcYmFlEBJo8S21j7YIwIPfZ3FjILSdAsBJWWZ8lz/:NgJ7ABrlCTBFlEBJNYpIZ3Fw0AEJWWZM

    Score
    10/10
    zgratratxmrigminer

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks