General

  • Target

    WRobot-z.zip

  • Size

    7.3MB

  • MD5

    35e859fa60060ab806683397594a3565

  • SHA1

    4585126346c4196c9e8aa7ac7e9d0276be26de89

  • SHA256

    1f99591ac3bfba4ce8a3113d7ef5558bbb8edea8d4989dfdb4e126f4e2993a28

  • SHA512

    577a8d002364f39f2e395d8a3d39131d3ae2c897c67e4826fd4b4ef2a65c8f786c101484fa8608fbb16db65761ef9f6d16de6971b9c49f8e888f29d87d08566f

  • SSDEEP

    196608:mJueG/nPQXBX440cGdMBxQp7c6l8c+btoRk:mYTnPQV43Mwp7c48cKt/

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V2 1 IoCs
  • Zgrat family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • WRobot-z.zip
    .zip
  • Bin/ControlzEx.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Bin/ICSharpCode.SharpZipLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Bin/MahApps.Metro.IconPacks.Material.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Bin/MahApps.Metro.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Bin/MemoryRobot.dll
    .dll windows:5 windows x86 arch:x86

    f88fb71807321b81d1b7191674724386


    Headers

    Imports

    Sections

  • Bin/Neo.Lua.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Bin/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Bin/RDManaged.dll
    .dll windows:5 windows x86 arch:x86

    f02eed0b3237173d495df69e55759df8


    Code Sign

    Headers

    Imports

    Sections

  • Bin/ScintillaNET.WPF.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Bin/ScintillaNET.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Bin/SlimDX.dll
    .dll windows:5 windows x86 arch:x86

    836a42f3ef9ad7066f67d8467f093f9f


    Headers

    Imports

    Sections

  • Bin/System.Windows.Interactivity.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Bin/UpdateManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Bin/authManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Bin/rStyle.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Bin/robotManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Bin/wManager.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Bin/wResources.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Fight Class Editor.lnk
    .lnk
  • Logs/29 Aug 2024 14H13.log.html
  • Products/Archaeologist.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/Auction.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/Automaton.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/Battlegrounder.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/Custom Profile.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/Fisherbot.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/Gatherer.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/Grinder.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/Milling.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/Party.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/Pet Battle.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/Profiles Converters.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/Prospecting.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/Quester.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/Schedule.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/Tracker.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Products/WRotation.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • README.txt
  • Relogger.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Settings/General-Kjdk.Frostmourne.xml
  • Settings/RobotManagerGlobalSetting.xml
  • Settings/WRobotGlobalSetting.xml
  • Settings/lang.txt
  • Settings/packages.xml
  • Settings/update.conf
  • Updater.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • Updater.exe.config
    .xml
  • WRobot (DX hook).lnk
    .lnk
  • WRobot (No DX hook).lnk
    .lnk
  • WRobot (No Lock Frame).lnk
    .lnk
  • WRobot (Quick Launch).lnk
    .lnk
  • WRobot.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • WRobot.exe.config
    .xml