Overview

overview

10

Static

static

3

2dafed2d89...18.exe

windows7-x64

10

2dafed2d89...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2dafed2d8919d3f2081327eed37b28e6_JaffaCakes118

  • Size

    743KB

  • Sample

    240510-gpqn5seg4z

  • MD5

    2dafed2d8919d3f2081327eed37b28e6

  • SHA1

    635290d8a7a9c522045b7cdbad14c9c228f36523

  • SHA256

    6a0712ac14ace1977933ffcfa1ed35283aea2c6cf78161a78d25f84d90f9c816

  • SHA512

    307becd9679ee76175a7ad8e7ba4ab1609a4dc9912c6a8fe563f665fb92f2e69f7301896d8762fa588144b41e6e5111950d435709259b3f2a1511c204e6f114f

  • SSDEEP

    12288:Y9twMz8CcvDNqBTdilufZnEM8A5Nm2INpE3q9EDWQr/Xq+3aaqyi3f:qnI5qKlu+Mjg2sE3qYNTXq+3rQ

Score
10/10
zgratagilenetrat

Malware Config

Targets

    • Target

      2dafed2d8919d3f2081327eed37b28e6_JaffaCakes118

    • Size

      743KB

    • MD5

      2dafed2d8919d3f2081327eed37b28e6

    • SHA1

      635290d8a7a9c522045b7cdbad14c9c228f36523

    • SHA256

      6a0712ac14ace1977933ffcfa1ed35283aea2c6cf78161a78d25f84d90f9c816

    • SHA512

      307becd9679ee76175a7ad8e7ba4ab1609a4dc9912c6a8fe563f665fb92f2e69f7301896d8762fa588144b41e6e5111950d435709259b3f2a1511c204e6f114f

    • SSDEEP

      12288:Y9twMz8CcvDNqBTdilufZnEM8A5Nm2INpE3q9EDWQr/Xq+3aaqyi3f:qnI5qKlu+Mjg2sE3qYNTXq+3rQ

    Score
    10/10
    zgratagilenetrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks