Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
165s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
03/11/2023, 17:01
General
-
Target
NEAS.7bb78646e86ca055c242964072f8aaa0.exe
-
Size
1.3MB
-
MD5
7bb78646e86ca055c242964072f8aaa0
-
SHA1
f507c76d277f4703108b5dcc681416fb09dcc284
-
SHA256
cb4d3cdc7a9f31a4a2780ebf4202623dc7812633e3e19cf43d8b183901fa1ac3
-
SHA512
86ff3afce744e6e6cca22c9f48bc387413728729521b16f763a43831ad74eed737f734f8b585996697d38d55f123cfc4172e994ba1e2ac3225d9824b84aed4ff
-
SSDEEP
24576:PfAij2k42zIxiKJKNatMrI8Pvixl/1nKtYULOZArzqjzRbfofd0:nAwlzIxiKJHqInnKtYUNXAFA
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
ZGRat
ZGRat is remote access trojan written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.7bb78646e86ca055c242964072f8aaa0.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.7bb78646e86ca055c242964072f8aaa0.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.7MB
-
Filesize
1.4MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
6.1MB
-
Filesize
72KB
-
Filesize
1.0MB
-
Filesize
240KB
-
Filesize
304KB
-
Filesize
7.7MB
-
Filesize
64KB