Overview

overview

10

Static

static

3

noncrypted...ub.exe

windows7-x64

10

noncrypted...ub.exe

windows10-2004-x64

10

User tags

Assigned on submission by the user, not by sandbox detections.

Threatview.io Proactive Hunter

Sharing

Copy URL
Twitter E-mail

General

  • Target

    noncryptedmainstub.exe.3

  • Size

    632KB

  • Sample

    240425-ggrlgagd3t

  • MD5

    9eab8c5d7b1f4659a787cc77d571f03b

  • SHA1

    27ce5d456d44b2d0ce994b14b11e8c5ffeabf385

  • SHA256

    1254ede011ea7c8ba1658bab1c14877d1a2dc85f8b4e2d04be6c5fc65f1c32b8

  • SHA512

    1fcfa030dac1c6fb573c614c1564e663086b518fa376ce3bbf90da6b1ecc8d065f91c90d6f6efea23c27efce720b90847869d0eef84ce4939fb1f43d7d0eafd9

  • SSDEEP

    12288:waOcj6gjLcJD/VF3AlAp2jLre/i6g578+3NruqK1lMdMD6QVCh5Iy5C:wuHj4JzQlq2j2/iJ78KNzK1lMCGGCR

Score
10/10
xmrigzgratminerrat

Malware Config

Targets

    • Target

      noncryptedmainstub.exe.3

    • Size

      632KB

    • MD5

      9eab8c5d7b1f4659a787cc77d571f03b

    • SHA1

      27ce5d456d44b2d0ce994b14b11e8c5ffeabf385

    • SHA256

      1254ede011ea7c8ba1658bab1c14877d1a2dc85f8b4e2d04be6c5fc65f1c32b8

    • SHA512

      1fcfa030dac1c6fb573c614c1564e663086b518fa376ce3bbf90da6b1ecc8d065f91c90d6f6efea23c27efce720b90847869d0eef84ce4939fb1f43d7d0eafd9

    • SSDEEP

      12288:waOcj6gjLcJD/VF3AlAp2jLre/i6g578+3NruqK1lMdMD6QVCh5Iy5C:wuHj4JzQlq2j2/iJ78KNzK1lMCGGCR

    Score
    10/10
    zgratratxmrigminer

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • xmrig

      XMRig is a high performance, open source, cross platform CPU/GPU miner.

      minerxmrig

    • XMRig Miner payload

      miner

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks