Overview

overview

10

Static

static

10

e0ee6e58b8...94.exe

windows7-x64

10

e0ee6e58b8...94.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    61c238534f84165056c04381a095c2d1.bin

  • Size

    1.4MB

  • Sample

    240429-bqafnaed9z

  • MD5

    039d03aeb0ea4c7e00efcebe08dbe0a3

  • SHA1

    f5ff32d048f9235298daf59c7d19b5f5f17fb61f

  • SHA256

    bebf3f496c8a63d33e685bb2a721932097164991e53a115a9f407b915de3981f

  • SHA512

    157ffc2878820eb1c565c4a6e03dda26ceba37b30e64e8e22578814e4a5ca0d1fa44ac8f58b3c9b14159e287f1590f787b9dff19d36e86b56365fd89842dae83

  • SSDEEP

    24576:tkM83NuYn5pF9iVTIlzbM7v5tnJvKSUxvt2rWJaTrc28LEBRDipM:tBiuW5KTIFw9tsxt3eBlUM

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      e0ee6e58b847764517e78ccb5932eca4cc78e7d442170bf3329daae8324af694.exe

    • Size

      1.8MB

    • MD5

      61c238534f84165056c04381a095c2d1

    • SHA1

      5b1257815babefde6c7308e445bfb41d6c5615a9

    • SHA256

      e0ee6e58b847764517e78ccb5932eca4cc78e7d442170bf3329daae8324af694

    • SHA512

      5725219c07e2fc29a330b8b40782e4593f7564483bf6c87f114ac61ace73ca8e2c8e621aa807a978aacc947d44ff2ec139253b470671720f26c80f1ba222bcc5

    • SSDEEP

      24576:BVe9eTp00PQriWf39Ush3bzcWiTTgiYSoLykSQp5QOhGxQ/7nLVNzv:B0sQrVv1RbgWsTgiBcpSWthGxOLVNz

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks