General

  • Target

    2b4a998c588be37808c8743624bdedec96ac3cb80de750cf81dde1fdd22d508f.exe

  • Size

    1.8MB

  • MD5

    8d6b749c08365f32e1fa55eaaff54827

  • SHA1

    28b8ae306d72ce3bbf860fd25c43b30668a16383

  • SHA256

    2b4a998c588be37808c8743624bdedec96ac3cb80de750cf81dde1fdd22d508f

  • SHA512

    c9fdc71446cd1bf17c3f4713779dfe1018746dad79ebf1cf4ef3f44e870ce3e42baa5a5859a26bdd6c7fb64d7ca1968e066a105396a23f357298511e6dc72992

  • SSDEEP

    24576:QSm6j+TPH2fF9fgpoX1dVb7SVfMWW5zrRjjBjR5wGOvvXWk45i1OSOhSkZQdv0cH:NIHUfIoXTpSRMWW98GOGk45XSOhdu0

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Detects executables packed with unregistered version of .NET Reactor 1 IoCs
  • Zgrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b4a998c588be37808c8743624bdedec96ac3cb80de750cf81dde1fdd22d508f.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections