General

  • Target

    114ad98c82f045d81f4b456900e650ea316e7dda7a1d8c5396e585488986d6fe.exe

  • Size

    293KB

  • MD5

    edcfedc1c217b5907f6b69272e5ca98f

  • SHA1

    e4bb7f3226e809c7ad1e12193ee26048cfc58790

  • SHA256

    114ad98c82f045d81f4b456900e650ea316e7dda7a1d8c5396e585488986d6fe

  • SHA512

    c1a9d970e7690f60eb1ad0ea85a57c942b31006db8dbbfcc46e1d0e1036ee2957f67ce205eba93b426d78dd6eb8bcf23fb713b3442ae1ab91f59a24ed6e4e626

  • SSDEEP

    3072:e3MK0Jc5YQoIpwg9iO2OaiS40eBwYG3zRrYp2OplMGc8A6uHPMG7CUqkZFI0CADL:u2c5YQoI2gzai9kjJkhpuJvYuH

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 114ad98c82f045d81f4b456900e650ea316e7dda7a1d8c5396e585488986d6fe.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections