Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41388b7eb1cc2cb9198b4f8a2a987d465a3423d73d6ecc798c29163e155ad5a6

  • Size

    457KB

  • Sample

    240429-fenw5aba8y

  • MD5

    aeebca819377475fd98e26fea481bade

  • SHA1

    12d1eaaa3669fb253709ae66ce295105d0a38a0d

  • SHA256

    41388b7eb1cc2cb9198b4f8a2a987d465a3423d73d6ecc798c29163e155ad5a6

  • SHA512

    d450d1a7b2682ab4c806d3bb48552c3c2428212bdb80e2a58ff89f742132016a66279264ee3085f75e4877d7f2899262da530cb0affde8e8b937da6b576ff78f

  • SSDEEP

    6144:66iLTZMpD0F8jy90abaNlv3AQDW3lhz8PjVIjE8QFxdUTwTHF3aTDgYvScuvfALS:7pAhaNx3pDW2UQFsTwTHmDgYvLMrqNQ

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      41388b7eb1cc2cb9198b4f8a2a987d465a3423d73d6ecc798c29163e155ad5a6

    • Size

      457KB

    • MD5

      aeebca819377475fd98e26fea481bade

    • SHA1

      12d1eaaa3669fb253709ae66ce295105d0a38a0d

    • SHA256

      41388b7eb1cc2cb9198b4f8a2a987d465a3423d73d6ecc798c29163e155ad5a6

    • SHA512

      d450d1a7b2682ab4c806d3bb48552c3c2428212bdb80e2a58ff89f742132016a66279264ee3085f75e4877d7f2899262da530cb0affde8e8b937da6b576ff78f

    • SSDEEP

      6144:66iLTZMpD0F8jy90abaNlv3AQDW3lhz8PjVIjE8QFxdUTwTHF3aTDgYvScuvfALS:7pAhaNx3pDW2UQFsTwTHmDgYvLMrqNQ

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks