General
-
Target
sample
-
Size
363KB
-
Sample
240428-fst1asha4s
-
MD5
7f9017011aa83fe044d3d943463dd9cd
-
SHA1
704b8c403cccd5eded6e1cb9bde0ec72d344b670
-
SHA256
16371c394db9bf609623c3b7531987cdfb87c9176b6660fdc38f7e0cc8cf51b0
-
SHA512
d8f94c25798ca2795805f99317adb900cbc96302c63f1efaf120f80ac398e4afebbbb30413c327577f1783d608219e598fde47807ae6e0b4e1212960fe7dee2a
-
SSDEEP
6144:rFdh46vGf65WrXk2Was082duwPfUf81hLO7WdbS0Ryze9xPg5vjoo5GtmZ:Jdh43DWas52d9PfUf81hLO7WdbS0RyzP
Static task
static1
Malware Config
Targets
-
-
Target
sample
-
Size
363KB
-
MD5
7f9017011aa83fe044d3d943463dd9cd
-
SHA1
704b8c403cccd5eded6e1cb9bde0ec72d344b670
-
SHA256
16371c394db9bf609623c3b7531987cdfb87c9176b6660fdc38f7e0cc8cf51b0
-
SHA512
d8f94c25798ca2795805f99317adb900cbc96302c63f1efaf120f80ac398e4afebbbb30413c327577f1783d608219e598fde47807ae6e0b4e1212960fe7dee2a
-
SSDEEP
6144:rFdh46vGf65WrXk2Was082duwPfUf81hLO7WdbS0Ryze9xPg5vjoo5GtmZ:Jdh43DWas52d9PfUf81hLO7WdbS0RyzP
-
Detect ZGRat V1
-
Creates new service(s)
-
Downloads MZ/PE file
-
Possible privilege escalation attempt
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-