Overview

overview

10

Static

static

1

e348f1fb78...4b.exe

windows7-x64

10

e348f1fb78...4b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a72b81b9f77ad2b214f40c705ec9d064.bin

  • Size

    57KB

  • Sample

    240503-bzbp3sbg5y

  • MD5

    516321868e2b6898d00c87268d8609ff

  • SHA1

    ddf0d913024fe45a38142c43f5fcf3c316e178da

  • SHA256

    b71d9786cf5bd28bfe2ce805a0dae7868af9357ecc59622cd5684e4ef300adf5

  • SHA512

    7f9929e2d122656a85ea220ab9955a8f2d038b22129fc6eb37cc775cdf111985e945214ca736b61c6a2d3d5f58f6024f6d126689aae92a66df819b8a9b3323ab

  • SSDEEP

    1536:mD9DjsAPKdd/l8oJ7nRFtgFVUgp8/m0sR4hXq:EjsWKdd/hnRF2UgW/mShXq

Score
10/10
zgratdiscoveryrat

Malware Config

Targets

    • Target

      e348f1fb78abcbb6061d31c0fa26b65ab721970bfa407ee75a3ca66fb5169a4b.exe

    • Size

      169KB

    • MD5

      a72b81b9f77ad2b214f40c705ec9d064

    • SHA1

      010c65757891cf8c80b8656aa0266480a324cf7c

    • SHA256

      e348f1fb78abcbb6061d31c0fa26b65ab721970bfa407ee75a3ca66fb5169a4b

    • SHA512

      6d1811bb24564c652d19dcdf039109f5dc262bf74c47e0b8c84e4557f5d63da14ccf78b88441a5aa72ffadb1760bf779b5d1769e55566811eda4503aca074269

    • SSDEEP

      3072:ovLS4LVZBtcaVvASKG00SVhrPGuLRqowPQJhydp:ILSMvG8uwowPQJhyj

    Score
    10/10
    zgratdiscoveryrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Downloads MZ/PE file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks