Overview

overview

10

Static

static

3

3e625179be...18.exe

windows7-x64

10

3e625179be...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e625179be9cd699e083be99f675559b_JaffaCakes118

  • Size

    890KB

  • Sample

    240513-jdz5jsce6z

  • MD5

    3e625179be9cd699e083be99f675559b

  • SHA1

    fa6929c60858cb0fc881936b471aa0b8135f0981

  • SHA256

    e42321f773a5f8174447c076215512256e66f6eb444aa5bfc606b202ea3f5cc2

  • SHA512

    fb13b898409fdb31713fd4ecca3670e4abac4b832615d45f19351116bebd2dabd612e6e374054f21995479552e3232c8fb764b7df284d884c666a28a3c534a36

  • SSDEEP

    12288:tSXVZYRS9BB/1qfhGOOk0Cpya8BUf2T20kWb/rI2H+1PKCN8ZeIimEHJCRzy0dTZ:0XB6f81Cpyd+Ps81V/0Xt+6L0/lY

Score
10/10
zgratevasionrat

Malware Config

Targets

    • Target

      3e625179be9cd699e083be99f675559b_JaffaCakes118

    • Size

      890KB

    • MD5

      3e625179be9cd699e083be99f675559b

    • SHA1

      fa6929c60858cb0fc881936b471aa0b8135f0981

    • SHA256

      e42321f773a5f8174447c076215512256e66f6eb444aa5bfc606b202ea3f5cc2

    • SHA512

      fb13b898409fdb31713fd4ecca3670e4abac4b832615d45f19351116bebd2dabd612e6e374054f21995479552e3232c8fb764b7df284d884c666a28a3c534a36

    • SSDEEP

      12288:tSXVZYRS9BB/1qfhGOOk0Cpya8BUf2T20kWb/rI2H+1PKCN8ZeIimEHJCRzy0dTZ:0XB6f81Cpyd+Ps81V/0Xt+6L0/lY

    Score
    10/10
    zgratevasionrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks