General

  • Target

    e84cad4f234445a47bf803591ac168031558e9215ba714c2197fe75b5188aa1c.exe

  • Size

    4.5MB

  • Sample

    240510-cenpkscd2x

  • MD5

    4de76ad34e9ccffc91bbec7a3c4e79e0

  • SHA1

    ff1a420b36557b306df4e2c3e020c49abeb3620a

  • SHA256

    e84cad4f234445a47bf803591ac168031558e9215ba714c2197fe75b5188aa1c

  • SHA512

    ff317dd768d14ec10d1cfc5cf2111b08a2943be55f58066b450ecb27e4531ea54d68911faf7ad4990e1bcb6d56f67b6c2179749266634c1dbb7bcfc57ed27dbe

  • SSDEEP

    49152:Fw+k41fhgCT4O3Qdx09EwApWjGUAN1ZtgX+cvfrmhC0w9O2XM+OBFpGMEMBF:FE2ScXywApWyZZWXLvjmo9iB

Score
10/10

Malware Config

Targets

    • Target

      e84cad4f234445a47bf803591ac168031558e9215ba714c2197fe75b5188aa1c.exe

    • Size

      4.5MB

    • MD5

      4de76ad34e9ccffc91bbec7a3c4e79e0

    • SHA1

      ff1a420b36557b306df4e2c3e020c49abeb3620a

    • SHA256

      e84cad4f234445a47bf803591ac168031558e9215ba714c2197fe75b5188aa1c

    • SHA512

      ff317dd768d14ec10d1cfc5cf2111b08a2943be55f58066b450ecb27e4531ea54d68911faf7ad4990e1bcb6d56f67b6c2179749266634c1dbb7bcfc57ed27dbe

    • SSDEEP

      49152:Fw+k41fhgCT4O3Qdx09EwApWjGUAN1ZtgX+cvfrmhC0w9O2XM+OBFpGMEMBF:FE2ScXywApWyZZWXLvjmo9iB

    Score
    10/10
    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

    • Detects executables packed with unregistered version of .NET Reactor

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Loads dropped DLL

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.