Extracted

Extracted

Extracted

Extracted

• • Target

    costs.vbs

  • Size

    821B

  • MD5

    d789af96fc286fcccec141524b71d243

  • SHA1

    a19b86fe0f698015bdaab5633d94be34daa7369c

  • SHA256

    cc2de0a518487a5178c6184dcdf623ac7b89f6e7fb9a541d5630921d00a7de3e

  • SHA512

    6e7519c10610bf6cfa5a583455c981e24c5a0f2f31142591c49c1e75b3e21a43a575207c3b9600faa953d8f128896353b4445713b069ccd7d4238daf50a4823d

  Score

  10^/10

  asyncratzgratraz_topexecutionrat

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Detect ZGRat V1

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1behavioral2