Overview

overview

10

Static

static

3

0bb1f15735...a6.exe

windows7-x64

10

0bb1f15735...a6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0bb1f1573597153cfc103837c100ad94a69b1ec04b16d71ad37c5ae30b7fd5a6.exe

  • Size

    632KB

  • Sample

    240512-bdv7labh83

  • MD5

    39717fb1aedf9d38856d2e9c94304168

  • SHA1

    8d89cd3746585dccf4e2ab0aa921dac3fbefb638

  • SHA256

    0bb1f1573597153cfc103837c100ad94a69b1ec04b16d71ad37c5ae30b7fd5a6

  • SHA512

    09a5faa343abb0ce19e94418f7221ca6425d9f86ffaaed963f7cca7576f8bb079c38e2e63637924ccc8c2de0618cc8217dee8358a231bcbcab3d5a4c356084fd

  • SSDEEP

    12288:LRHWGJEj1S0yB1dk695iqrV/ou71zs9rfB8KIANImH9gF44Aar:FHZEJfc1dkQ51BRgfB8KD3HSLAar

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      0bb1f1573597153cfc103837c100ad94a69b1ec04b16d71ad37c5ae30b7fd5a6.exe

    • Size

      632KB

    • MD5

      39717fb1aedf9d38856d2e9c94304168

    • SHA1

      8d89cd3746585dccf4e2ab0aa921dac3fbefb638

    • SHA256

      0bb1f1573597153cfc103837c100ad94a69b1ec04b16d71ad37c5ae30b7fd5a6

    • SHA512

      09a5faa343abb0ce19e94418f7221ca6425d9f86ffaaed963f7cca7576f8bb079c38e2e63637924ccc8c2de0618cc8217dee8358a231bcbcab3d5a4c356084fd

    • SSDEEP

      12288:LRHWGJEj1S0yB1dk695iqrV/ou71zs9rfB8KIANImH9gF44Aar:FHZEJfc1dkQ51BRgfB8KD3HSLAar

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks