Overview

overview

10

Static

static

10

PResolver.dll

windows7-x64

1

PResolver.dll

windows10-2004-x64

1

WotBCReReloaded.exe

windows7-x64

10

WotBCReReloaded.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    soft_25.11 (2).rar

  • Size

    1.2MB

  • Sample

    241208-x48fhaxnep

  • MD5

    bf30b579e3b4e20e4acdcd23192a8023

  • SHA1

    4638e700d9b19a521c67aebbc1d12976879020e2

  • SHA256

    98dc216f2c9037db85da16719b88ae9a98ab0fced61539f8dea4c6a98d236161

  • SHA512

    7c5333a29731efa4e6494e82ca712a893c05b462d64918e05157fb5097400ef9c3a9426fea94f7c2d889bde135fc0cc9642526778a6c98faf76d58440ac9e05e

  • SSDEEP

    24576:FeAWmhq4MhyV6N9wZku5biwfxuYU0qm7zW7JDeqJoAxi6ehaXgwY7W:tjM0qImwEEVWtsiT87W

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      PResolver.dll

    • Size

      1.3MB

    • MD5

      06ba82f45959b6073f185a89bbdb755f

    • SHA1

      189bb352a971386a473e41963440a9e66501312e

    • SHA256

      a39ab36b0a0e7c0723769583ba32b61ace002bc831b1504ef5388605e811e6ae

    • SHA512

      7f444afcd63f10e3e24af3698e3c5460c2ec985a273ad9fd7cf2a3ca44a628b4d40c1f69d0d1db79431357e3bbbda9c89143e64732ff2bbbab3d81f4b882a035

    • SSDEEP

      24576:Z1sgLwnP8qeseYdgnQn652UOrKiTmcJlPVIH06iyf:cgsnPNevYdg6+I1JjIU6i

    Score
    1/10
    behavioral1behavioral2

    • Target

      WotBCReReloaded.exe

    • Size

      1.3MB

    • MD5

      70ccbdc044a996f4e63e9aa4d160c603

    • SHA1

      bd3d018f130883f15e4d5b489f7f534a039f8122

    • SHA256

      54eea6abceeda21f32af475b0307b05564f236195f8fe2115d00dfdde15279ff

    • SHA512

      3eb7a436913bd12d22eea7860111b1977719ae4ffcf7ce072a79af2021421fa918775efdb967409f40f8893471013a123c277973b6339e99573e77c42d3e3477

    • SSDEEP

      24576:+bP21VCeqrlscS365KL2IuBkfp63MIpVt2LgAZY4CkIu1RKaX0xjE:Z36qc8I+7+j

    Score
    10/10
    zgratrat

    • Detect ZGRat V2

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Zgrat family

      zgrat
    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks