Extracted

• • Target

    364e800c0cf1962f36e41f8f1a5a1029decb25007c712277275729e299543683

  • Size

    408KB

  • MD5

    a4dcfaa13e52e432fc8fdca623c6f01e

  • SHA1

    a31d46c6989187943a2ff623c0ce40989dc22739

  • SHA256

    364e800c0cf1962f36e41f8f1a5a1029decb25007c712277275729e299543683

  • SHA512

    ef19c81dfbc921c4e2201f97b3e42895bad3a8783f92ed4d0a69b5e76729115e6b127591041cdd245e9f32db36f0955b12ee4ab1014ac53ab5560ad6aaa5b6bb

  • SSDEEP

    6144:Et/Mq3iBOHmgiOSbXEX1Hj09wKU2mvAJgiBthwUl:LaRilbUX2jS2Bt2Ul

  Score

  10^/10

  stealczgratdiscoveryratstealer

  • Detect ZGRat V1

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2