Overview

overview

10

Static

static

3

62990bd812...9d.exe

windows7-x64

10

62990bd812...9d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    62990bd81297a42bf5348c15a196e488a531420d12869392c5bd0724ca997c9d.exe

  • Size

    439KB

  • Sample

    240514-bpec8adc71

  • MD5

    1885cacfae37edb28b438588771fb03f

  • SHA1

    b8b86b6ddc681a9333628f344875d9d33fee7185

  • SHA256

    62990bd81297a42bf5348c15a196e488a531420d12869392c5bd0724ca997c9d

  • SHA512

    afc2b931689f21c1b7770735f2292c2fa667b86123354d8409d264118e1908f22dddd58fc17545e9feaae786c2414133923c2170be879ff502398f87c556d57e

  • SSDEEP

    6144:NZi9pP2JNMv8P4WyKNh6xzRnM3VVYijO9Wi7XMJRAc3ewc5n5:NZibPoKv6fNhEFMDBMWY3cu/5

Score
10/10
zgratpersistenceratspywarestealer

Malware Config

Targets

    • Target

      62990bd81297a42bf5348c15a196e488a531420d12869392c5bd0724ca997c9d.exe

    • Size

      439KB

    • MD5

      1885cacfae37edb28b438588771fb03f

    • SHA1

      b8b86b6ddc681a9333628f344875d9d33fee7185

    • SHA256

      62990bd81297a42bf5348c15a196e488a531420d12869392c5bd0724ca997c9d

    • SHA512

      afc2b931689f21c1b7770735f2292c2fa667b86123354d8409d264118e1908f22dddd58fc17545e9feaae786c2414133923c2170be879ff502398f87c556d57e

    • SSDEEP

      6144:NZi9pP2JNMv8P4WyKNh6xzRnM3VVYijO9Wi7XMJRAc3ewc5n5:NZibPoKv6fNhEFMDBMWY3cu/5

    Score
    10/10
    zgratpersistenceratspywarestealer

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks