home.social

#zgrat — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #zgrat, aggregated by home.social.

  1. D3Lab @[email protected] ·

    Campagne #Malware #Italy Week 20

    ☠️🔥💣👻
    #AgentTesla: Bozza Contratto
    #Guloader: Ordine
    #Formbook: Pagamento
    #ZGRat: Contratto
    #Irata: APK Bank
    #PureLogs: Documenti
    #Nanocore: Fattura
    #LokiBot: Delivery
    #RemcosRat: Ordine

    #mwitaly

    #malware #italy #agenttesla #guloader #formbook #zgrat
  2. D3Lab @[email protected] ·

    Campagne #Malware #Italy Week 15

    👻💣🔥☠️
    #AgentTesla: Ordine
    #Formbook: Fattura
    #SpyNote #Irata: APK Bank - INPS
    #Guloader: Contratto
    #DarkGate: Documento
    #Remcos: Offerta
    #ZGRat: Booking
    #mwitaly

    #malware #italy #agenttesla #formbook #spynote #irata
  3. D3Lab @[email protected] ·

    Campagne #Malware #Italy Week 14

    👻💣🔥☠️
    #AgentTesla: Bonifico
    #Irata: APK Bank
    #Remcos: Offerta
    #ZGRat: Booking
    #XWorm: Aggionamenti
    #Formbook: Fattura
    #mwitaly

    #malware #italy #agenttesla #irata #remcos #zgrat
  4. 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @[email protected] ·

    @malware_traffic This #zgRAT sample makes a new connection to the C2 server (5.188.159.44:39001) almost every second. A few other samples show similar behavior. These reconnections could be caused by a C2 polling mechanism, but another theory is that they are the result of some error in the C2 comms.
    joesandbox.com/analysis/135111

    #zgrat
  5. 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @[email protected] ·

    @malware_traffic This #zgRAT sample makes a new connection to the C2 server (5.188.159.44:39001) almost every second. A few other samples show similar behavior. These reconnections could be caused by a C2 polling mechanism, but another theory is that they are the result of some error in the C2 comms.
    joesandbox.com/analysis/135111

    #zgrat