Overview

overview

10

Static

static

10

a7767274a4...cs.exe

windows7-x64

10

a7767274a4...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a7767274a4799d936b58d3946deed650_NeikiAnalytics

  • Size

    529KB

  • Sample

    240510-jsq57abf21

  • MD5

    a7767274a4799d936b58d3946deed650

  • SHA1

    244e7229c233fee50b4a1826c47be23aded480f6

  • SHA256

    c59d439740eaed321bc13f0bc71146cea479b589e8d10d44085898055dd9dcc6

  • SHA512

    8bbcd8cdf2488cb2e52620dbb96ffa65d59f460db7dba6e8282fbb777faf10445317a27b87035949441001bea9294f2d9b95c12d6818d20080e088bc8c5ea544

  • SSDEEP

    12288:uomtZneH0RFnR4bb+o8RNw0Axf0PRtzfUQRX+:knXFGiZZCf0ZtzMQ4

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      a7767274a4799d936b58d3946deed650_NeikiAnalytics

    • Size

      529KB

    • MD5

      a7767274a4799d936b58d3946deed650

    • SHA1

      244e7229c233fee50b4a1826c47be23aded480f6

    • SHA256

      c59d439740eaed321bc13f0bc71146cea479b589e8d10d44085898055dd9dcc6

    • SHA512

      8bbcd8cdf2488cb2e52620dbb96ffa65d59f460db7dba6e8282fbb777faf10445317a27b87035949441001bea9294f2d9b95c12d6818d20080e088bc8c5ea544

    • SSDEEP

      12288:uomtZneH0RFnR4bb+o8RNw0Axf0PRtzfUQRX+:knXFGiZZCf0ZtzMQ4

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks