Overview

overview

10

Static

static

1

1ee3e17474...18.exe

windows7-x64

10

1ee3e17474...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ee3e174741cffcb78315d41afbdd9f1_JaffaCakes118

  • Size

    778KB

  • Sample

    240507-a7b55sah8x

  • MD5

    1ee3e174741cffcb78315d41afbdd9f1

  • SHA1

    c2d325d0db0101f5eb6cdbf174b06d5623f9a011

  • SHA256

    02c74978d2d518d47fa8153d06e90ad6c2f30c0052c3d33b98df8e0ca6010eb9

  • SHA512

    9e7e0cb229762ad6a00a8a93b43dbbd5041eb7c553950db18c60df74d619fb54996a480e9f3d760a96750c78ff96399ad6fdc9c643229af0e438cf67d6f3971b

  • SSDEEP

    12288:/z9fv08UqiEoZG4C4BYyoKEFQDR0G/i0kvNt:79fv0S5EBxoDVNt

Score
10/10
zgratagilenetrat

Malware Config

Targets

    • Target

      1ee3e174741cffcb78315d41afbdd9f1_JaffaCakes118

    • Size

      778KB

    • MD5

      1ee3e174741cffcb78315d41afbdd9f1

    • SHA1

      c2d325d0db0101f5eb6cdbf174b06d5623f9a011

    • SHA256

      02c74978d2d518d47fa8153d06e90ad6c2f30c0052c3d33b98df8e0ca6010eb9

    • SHA512

      9e7e0cb229762ad6a00a8a93b43dbbd5041eb7c553950db18c60df74d619fb54996a480e9f3d760a96750c78ff96399ad6fdc9c643229af0e438cf67d6f3971b

    • SSDEEP

      12288:/z9fv08UqiEoZG4C4BYyoKEFQDR0G/i0kvNt:79fv0S5EBxoDVNt

    Score
    10/10
    zgratagilenetrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks