Overview

overview

10

Static

static

10

3d942f261c...18.exe

windows7-x64

10

3d942f261c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3d942f261cc748e9c2ab91a26a6b53d4_JaffaCakes118

  • Size

    340KB

  • Sample

    240514-c3npgsff5z

  • MD5

    3d942f261cc748e9c2ab91a26a6b53d4

  • SHA1

    c5dc06b29bb38eb86fbe22b3b681a5f523f68293

  • SHA256

    eb8d4be3f8cb5b348afd8a574eb38e8c419e6e8a6678d38f06c0369703dacffb

  • SHA512

    ba32e2ae6067059c2c4895025d25fbb2837032e21e5af40bd8137642dd9f631e5477b853caa853054a0ebc51bce519ab9244f4ecb7bdf75bcf0641a435a65920

  • SSDEEP

    3072:tNd6gEYAqvZvxN3p4pxKqcJ0GYNNSWv4bwEZypklN3yoXeIU/4HjBLPMQ/BN63hw:fEOv5xVp4pxhcCE04bB/LGDTU

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      3d942f261cc748e9c2ab91a26a6b53d4_JaffaCakes118

    • Size

      340KB

    • MD5

      3d942f261cc748e9c2ab91a26a6b53d4

    • SHA1

      c5dc06b29bb38eb86fbe22b3b681a5f523f68293

    • SHA256

      eb8d4be3f8cb5b348afd8a574eb38e8c419e6e8a6678d38f06c0369703dacffb

    • SHA512

      ba32e2ae6067059c2c4895025d25fbb2837032e21e5af40bd8137642dd9f631e5477b853caa853054a0ebc51bce519ab9244f4ecb7bdf75bcf0641a435a65920

    • SSDEEP

      3072:tNd6gEYAqvZvxN3p4pxKqcJ0GYNNSWv4bwEZypklN3yoXeIU/4HjBLPMQ/BN63hw:fEOv5xVp4pxhcCE04bB/LGDTU

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks