Overview

overview

10

Static

static

3

Sentinel.exe

windows7-x64

10

Sentinel.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Sentinel.exe

  • Size

    1.7MB

  • Sample

    240513-y22qlscg88

  • MD5

    a991bca8b1b12edcef7ea9365083910a

  • SHA1

    c2a87723dc3a20162e84062fd3420c07be74f56c

  • SHA256

    7a6e7ce0b1d27034eb2743bb25305b2ac9a9a950b3ccbb43d5d3c5ba2d43122d

  • SHA512

    edf63d41a1b2bdc5db90bbc33254a400c3ab182fd8eea530c326907208857a3a58fe5fa379934daf41423576f8b589a41541c62f302cbf04028251fe6faa7e4f

  • SSDEEP

    24576:6Z8lPrl9NaJd9N11gdlCaGApu8Fk1VM+q2fv3BrUIQxgcEQXwBNtr91L8Cu:bPpuW7G98FkPMYv3Br6ZDStp9

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      Sentinel.exe

    • Size

      1.7MB

    • MD5

      a991bca8b1b12edcef7ea9365083910a

    • SHA1

      c2a87723dc3a20162e84062fd3420c07be74f56c

    • SHA256

      7a6e7ce0b1d27034eb2743bb25305b2ac9a9a950b3ccbb43d5d3c5ba2d43122d

    • SHA512

      edf63d41a1b2bdc5db90bbc33254a400c3ab182fd8eea530c326907208857a3a58fe5fa379934daf41423576f8b589a41541c62f302cbf04028251fe6faa7e4f

    • SSDEEP

      24576:6Z8lPrl9NaJd9N11gdlCaGApu8Fk1VM+q2fv3BrUIQxgcEQXwBNtr91L8Cu:bPpuW7G98FkPMYv3Br6ZDStp9

    Score
    10/10
    zgratrat

    • Detect ZGRat V2

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks