General
-
Target
958ccd8e8dcce5e7bac5f891e8edc42ad6c5497d9385c8ae26c328c5f7beda24.zip
-
Size
2.1MB
-
MD5
6f337c714116ba33a47c9ecca7b69ca7
-
SHA1
2263189f9c5270cb586de1f9ca2d471c135b8482
-
SHA256
26d0fdbb4bd6d3860f9e15d6311f2e28d36ff8df09aa51e945be368ed25f4255
-
SHA512
fd8d9dd9fe095e56a02b9df559a8d693bb976b99a337bb4a2dd28239d988132e29bca2b55acdcc09d5a20541b71be34d1840028d7b3d38a113053a9bf3940c65
-
SSDEEP
49152:EUh5x8LeMRL9donR9j9Ugu9nBM3Kx9Pnhzg4lLv:ZALRSKgAnwevBv
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
Zgrat family
-
.NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
958ccd8e8dcce5e7bac5f891e8edc42ad6c5497d9385c8ae26c328c5f7beda24.zip
Password: infected
-
958ccd8e8dcce5e7bac5f891e8edc42ad6c5497d9385c8ae26c328c5f7beda24.exe
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections