Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    beb03f0089fe98fa82414bb1ee2cf421b63a5a195e1aa25c542f6294bdb55ebc

  • Size

    469KB

  • Sample

    240429-fbrtlsah8z

  • MD5

    667aa6ae90136dda41300e4f668932f9

  • SHA1

    37f0b059e03ef0fae54c56ae33d3b156da9b02c0

  • SHA256

    beb03f0089fe98fa82414bb1ee2cf421b63a5a195e1aa25c542f6294bdb55ebc

  • SHA512

    d5a8e53278b3a937b57423165ec5d7c96502ec39b9c69968e46680a3866b0fd12a39aaf878b90915d4c3cceea0af110fabca8520b6fa4f85f35a95b2c08c7209

  • SSDEEP

    6144:HeUUtGhDAl8FrxEhyTXSAjC9C2qHzTKqjBS27uwbPSijjNydQJjJqO98pPJ:HQsTXlF9jwqKkN9JqO98BJ

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      beb03f0089fe98fa82414bb1ee2cf421b63a5a195e1aa25c542f6294bdb55ebc

    • Size

      469KB

    • MD5

      667aa6ae90136dda41300e4f668932f9

    • SHA1

      37f0b059e03ef0fae54c56ae33d3b156da9b02c0

    • SHA256

      beb03f0089fe98fa82414bb1ee2cf421b63a5a195e1aa25c542f6294bdb55ebc

    • SHA512

      d5a8e53278b3a937b57423165ec5d7c96502ec39b9c69968e46680a3866b0fd12a39aaf878b90915d4c3cceea0af110fabca8520b6fa4f85f35a95b2c08c7209

    • SSDEEP

      6144:HeUUtGhDAl8FrxEhyTXSAjC9C2qHzTKqjBS27uwbPSijjNydQJjJqO98pPJ:HQsTXlF9jwqKkN9JqO98BJ

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks