General

  • Target

    ChineseTriad.zip

  • Size

    72.8MB

  • MD5

    9ad8a5eeb4f90d85161c025291ae6ff2

  • SHA1

    eeb5fea6e1aba111f04764bd0d2d2fc3997eb915

  • SHA256

    7d11115576e864498bcd15f08c2c390b23613b4391c959a82694eafa84650ed2

  • SHA512

    8574aecb27fa898fcc78de8144d4c6c23cb2b414a7d196ffe13fd1aa88336ef2a203a78bcc61a70006c6b4dace2d0bc9edce2a6801fba1acba280b623e5996f3

  • SSDEEP

    1572864:eplSZtRPP0Sq0HxvPnXoJW5fo/k+dcvGf+YFMRYrcj6y8bOBohpQd:ebSLRnzq0RvPXoJcos+dcORMPT8bVhSd

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • ChineseTriad.zip
    .zip
  • ChineseTriad/Installer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • ChineseTriad/LICENSE
  • ChineseTriad/PhysXCore64.dll
    .dll windows:5 windows x64 arch:x64

    b14e18f5e604677ff392b975cbfe84a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChineseTriad/bootstrap.min.css
  • ChineseTriad/data3.bin
  • ChineseTriad/dbgcore.dll
    .dll windows:10 windows x64 arch:x64

    5203f507e4a303d63f015849ce72f6b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChineseTriad/dbghelp.dll
    .dll windows:10 windows x64 arch:x64

    cc7b08b8be5803a52e9283d0d7b6a656


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChineseTriad/default.css
  • ChineseTriad/dxcompiler.dll
    .dll windows:6 windows x64 arch:x64

    64a737c6e4a66969f3f85b3e742ecd0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChineseTriad/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    fa83d5fced6aaf3a8a88470e9e91502b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChineseTriad/libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    7d3ff40744c2941bda1c1652c2aea2fd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChineseTriad/libScePad.dll
    .dll windows:5 windows x64 arch:x64

    46f65cc840f6fafb2cb7e78b466dc7d9


    Headers

    Imports

    Exports

    Sections

  • ChineseTriad/libexpat.dll
    .dll windows:4 windows x64 arch:x64

    9f20de26dbad86a13fff6a3c28802c88


    Headers

    Imports

    Exports

    Sections

  • ChineseTriad/libpad.dll
    .dll windows:5 windows x64 arch:x64

    03044bb41b0181da50ab0bbfd5a85012


    Headers

    Imports

    Exports

    Sections

  • ChineseTriad/libtools.x64.dll
    .dll windows:6 windows x64 arch:x64

    100285b065639ba5e832d48033d79449


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChineseTriad/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    2cb5da5225e972a08f32d04b8085dc7e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChineseTriad/wxmsw28u_core_vc_custom_64.dll
    .dll windows:5 windows x64 arch:x64

    c66320ebbec1a7a1a8ebe82cccc10fd4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ChineseTriad/wxmsw28ud_core_vc_custom_64.dll
    .dll windows:5 windows x64 arch:x64

    69b60289b349584e28cd45a001a1d680


    Code Sign

    Headers

    Imports

    Exports

    Sections