Overview

overview

10

Static

static

1

1a5c0296fc...18.exe

windows7-x64

10

1a5c0296fc...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1a5c0296fc617d1f5d8f2fc5e07054ea_JaffaCakes118

  • Size

    575KB

  • Sample

    240506-c27qzaec3y

  • MD5

    1a5c0296fc617d1f5d8f2fc5e07054ea

  • SHA1

    6f925105ec99a59f21a6ff1ae43c378ba5db1299

  • SHA256

    07e29f000ed708f299bf6c7e034bbc35ffd21662632930aadf4f3d3a4c1aee18

  • SHA512

    6691163ecb6c12f258a3436288d727f001debb9ff32dd5a07ca6d6f3cc8cca95918bb5d4fccee132822ac400eaa210e3a9ee1cd84c595cdadc6a8953600b54a6

  • SSDEEP

    12288:070cYEJSPyIKrIxap3RkL/Y+oHjc1Qb8m07JZpVUDk3P7Krxgw2xRrHP:070cY7PyIgpp3R+/jEgGB0F3VUDgPV

Score
10/10
zgratdiscoveryratspywarestealer

Malware Config

Targets

    • Target

      1a5c0296fc617d1f5d8f2fc5e07054ea_JaffaCakes118

    • Size

      575KB

    • MD5

      1a5c0296fc617d1f5d8f2fc5e07054ea

    • SHA1

      6f925105ec99a59f21a6ff1ae43c378ba5db1299

    • SHA256

      07e29f000ed708f299bf6c7e034bbc35ffd21662632930aadf4f3d3a4c1aee18

    • SHA512

      6691163ecb6c12f258a3436288d727f001debb9ff32dd5a07ca6d6f3cc8cca95918bb5d4fccee132822ac400eaa210e3a9ee1cd84c595cdadc6a8953600b54a6

    • SSDEEP

      12288:070cYEJSPyIKrIxap3RkL/Y+oHjc1Qb8m07JZpVUDk3P7Krxgw2xRrHP:070cY7PyIgpp3R+/jEgGB0F3VUDgPV

    Score
    10/10
    zgratdiscoveryratspywarestealer

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Reads WinSCP keys stored on the system

      Tries to access WinSCP stored sessions.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks