Overview

overview

10

Static

static

10

132ef1a933...c3.exe

windows7-x64

10

132ef1a933...c3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    132ef1a933f9d26fb0bb46b0a970dbfe05ad8fe0859ece8eb973b5584a580cc3.zip

  • Size

    2.1MB

  • Sample

    240506-jzhsdseb3x

  • MD5

    310a7f58d56127b65325142b751fbc3b

  • SHA1

    d509be58124e87096ea41571673be00861d6b7ea

  • SHA256

    550f4fb2c136dd735605c0b81243a8350410e904eb423ae1c1b60aee8e41eec6

  • SHA512

    de236dbe97c6e1540b9f68f80da2277e65efd09f2f7a3dea9b915cb3f2f01a03462e32489bd3d552b668e8e4d2255d303c58c649516742b8d3908619de2f93cb

  • SSDEEP

    49152:vGOvhQIHxY6b6RRrvwnnMVKQZN1D7JP2D9/nd5t6KZn:HOIRBb63e0l1D7JOD9fd3nn

Score
10/10
zgratransomwareratspywarestealer

Malware Config

Targets

    • Target

      132ef1a933f9d26fb0bb46b0a970dbfe05ad8fe0859ece8eb973b5584a580cc3.exe

    • Size

      2.6MB

    • MD5

      71f0e2645d9051c3a8f5cf2dbce9d074

    • SHA1

      a303632965f9fdc3b7cb4c532831c0b38f24df90

    • SHA256

      132ef1a933f9d26fb0bb46b0a970dbfe05ad8fe0859ece8eb973b5584a580cc3

    • SHA512

      14625c8fe238a41c0a45579731a15a705f153681a0f4e212b8315e3f5643542c57e17f82c247552b21417aa92dce36fd40fbcaaf85b4fb462182c2814f4f8077

    • SSDEEP

      49152:Til/s9YkCKuT/s9YEQtQRTMYIMi7ztf33cSywWyFoEgn9u:OVsGkClzsG1tQRjdih8rwc

    Score
    10/10
    zgratransomwareratspywarestealer

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks