Overview

overview

10

Static

static

3

cc3dbbf0ec...cc.exe

windows7-x64

10

cc3dbbf0ec...cc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc3dbbf0ec73178cfe76cd33d456e9837f2e82c5b82fd851e6bd455bcf4379cc.exe

  • Size

    3.0MB

  • Sample

    240509-l68nhafb26

  • MD5

    d8eb5a41c52470c9999c0c62f233668b

  • SHA1

    7f985e2c1f4ddc34370ace52ccf8be05c2f03a46

  • SHA256

    cc3dbbf0ec73178cfe76cd33d456e9837f2e82c5b82fd851e6bd455bcf4379cc

  • SHA512

    628e1910d91e13e510635d0e5aeb839f4b4f0dde1acf67ce2c567cee827c5f8692e72cabb4a175cf71cadaed4676956c508357bf7ac4ce678d3ab79c6e3cc6aa

  • SSDEEP

    49152:rkOO5oCl0/H8RSEK+6koqUrz4e2AZEM71Tiiq5XLE2lm7ADOkr+iqSCnsIGofX8:Av5oClCH8Ei6xqmNrhG15X/m7YrLq5nW

Score
10/10
zgratpersistencerat

Malware Config

Targets

    • Target

      cc3dbbf0ec73178cfe76cd33d456e9837f2e82c5b82fd851e6bd455bcf4379cc.exe

    • Size

      3.0MB

    • MD5

      d8eb5a41c52470c9999c0c62f233668b

    • SHA1

      7f985e2c1f4ddc34370ace52ccf8be05c2f03a46

    • SHA256

      cc3dbbf0ec73178cfe76cd33d456e9837f2e82c5b82fd851e6bd455bcf4379cc

    • SHA512

      628e1910d91e13e510635d0e5aeb839f4b4f0dde1acf67ce2c567cee827c5f8692e72cabb4a175cf71cadaed4676956c508357bf7ac4ce678d3ab79c6e3cc6aa

    • SSDEEP

      49152:rkOO5oCl0/H8RSEK+6koqUrz4e2AZEM71Tiiq5XLE2lm7ADOkr+iqSCnsIGofX8:Av5oClCH8Ei6xqmNrhG15X/m7YrLq5nW

    Score
    10/10
    zgratpersistencerat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks