General

  • Target

    e7b93b037be41d929891139dff08020fc3335867bbdbd48f81f4d8f0267599eb.exe

  • Size

    1.8MB

  • Sample

    240501-spc9laca26

  • MD5

    588622270767a1525ee334f31c043914

  • SHA1

    7a8fa658798f489cffd71a5a913beb66a9c70962

  • SHA256

    e7b93b037be41d929891139dff08020fc3335867bbdbd48f81f4d8f0267599eb

  • SHA512

    f9ecbe9de4e944c2e94a090b7821a02efbae179982db22afc90ebb9719fd155173d265782a3bdbef72122e3d01bfa22036908c1e6f4d02d411d44e55eaa86b05

  • SSDEEP

    49152:n8XBVdct9bja2wZtlSl4AGFBavlejj4z:nyBVd+vanH0qtFzjg

Malware Config

Targets

    • Target

      e7b93b037be41d929891139dff08020fc3335867bbdbd48f81f4d8f0267599eb.exe

    • Size

      1.8MB

    • MD5

      588622270767a1525ee334f31c043914

    • SHA1

      7a8fa658798f489cffd71a5a913beb66a9c70962

    • SHA256

      e7b93b037be41d929891139dff08020fc3335867bbdbd48f81f4d8f0267599eb

    • SHA512

      f9ecbe9de4e944c2e94a090b7821a02efbae179982db22afc90ebb9719fd155173d265782a3bdbef72122e3d01bfa22036908c1e6f4d02d411d44e55eaa86b05

    • SSDEEP

      49152:n8XBVdct9bja2wZtlSl4AGFBavlejj4z:nyBVd+vanH0qtFzjg

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks