Overview

overview

10

Static

static

10

IPTVCheckerv210.exe

windows7-x64

10

IPTVCheckerv210.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    IPTVCheckerv210.exe

  • Size

    6.5MB

  • Sample

    240510-n4apssgc64

  • MD5

    57ac6b3c5eab44eb04e943166072d3de

  • SHA1

    50fb80d2ebcbd5f111cfa6308bd3835a013ba41a

  • SHA256

    c17efa57565d97c75937d7587c9b56f58d9bf7d10d9c94cc032588e119baf545

  • SHA512

    51a4d94362e53ddcf6a41d43dc9a593082a8f524950116c395368c024030128d818fbeee2825b8ea18b0c3c4cc2a0bbcb8f053457b87df7de9da956f8eecdcbe

  • SSDEEP

    196608:T0LKDnJ45/9iD54+V11bFv4z9dR6Dlp2l:fuR6Dlp2l

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      IPTVCheckerv210.exe

    • Size

      6.5MB

    • MD5

      57ac6b3c5eab44eb04e943166072d3de

    • SHA1

      50fb80d2ebcbd5f111cfa6308bd3835a013ba41a

    • SHA256

      c17efa57565d97c75937d7587c9b56f58d9bf7d10d9c94cc032588e119baf545

    • SHA512

      51a4d94362e53ddcf6a41d43dc9a593082a8f524950116c395368c024030128d818fbeee2825b8ea18b0c3c4cc2a0bbcb8f053457b87df7de9da956f8eecdcbe

    • SSDEEP

      196608:T0LKDnJ45/9iD54+V11bFv4z9dR6Dlp2l:fuR6Dlp2l

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks