Resubmissions
14-05-2024 07:02
240514-ht24eaeh43 10
General
-
Target
958ccd8e8dcce5e7bac5f891e8edc42ad6c5497d9385c8ae26c328c5f7beda24.zip
-
Size
2.1MB
-
MD5
50fe630b49ca138e290a4d7f5b358e31
-
SHA1
1a56018505c89fbfc2845cdb231fff11599c5642
-
SHA256
12dcefaf7cb33b93666d904438d7e6de7d71618230f225c8a7ab37096857ae48
-
SHA512
e52e72576ecf4bc2a6ea57f18ebfe7b73552868876057296b88f33e18cc3074641ce6f8a2c24bc66ac8c850832a2e8f3f9216aef5d9f96c576aa2f6fe975b54c
-
SSDEEP
49152:2htZekNARjWmnHFeDesP4ssJSHyzHSw673yYQNmAZ2gf6xZwd:EtZekmx/HFeDBTsdHg3eNlsLHy
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
Zgrat family
-
.NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
958ccd8e8dcce5e7bac5f891e8edc42ad6c5497d9385c8ae26c328c5f7beda24.zip
Password: infected
-
958ccd8e8dcce5e7bac5f891e8edc42ad6c5497d9385c8ae26c328c5f7beda24.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections