Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8324dd03377ae4f738b328a10f99ccb4def68ed4a4f578c4ff89bb185a16e695

  • Size

    1.7MB

  • Sample

    231115-ea4lcach7y

  • MD5

    1293f563c73464bc5d7f43aac04bbcd8

  • SHA1

    2104dc4168aae58bbb281fdc0ca746cb207f50f7

  • SHA256

    8324dd03377ae4f738b328a10f99ccb4def68ed4a4f578c4ff89bb185a16e695

  • SHA512

    e1fe8d3d8b063adabbd5b6f3e6327a67ba0d23f6cdd82bfa954270e99a368dc8394b0d2a70caece6edd60ee09651873c3162b27e3b8e28f407021f8bee28a559

  • SSDEEP

    24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      8324dd03377ae4f738b328a10f99ccb4def68ed4a4f578c4ff89bb185a16e695

    • Size

      1.7MB

    • MD5

      1293f563c73464bc5d7f43aac04bbcd8

    • SHA1

      2104dc4168aae58bbb281fdc0ca746cb207f50f7

    • SHA256

      8324dd03377ae4f738b328a10f99ccb4def68ed4a4f578c4ff89bb185a16e695

    • SHA512

      e1fe8d3d8b063adabbd5b6f3e6327a67ba0d23f6cdd82bfa954270e99a368dc8394b0d2a70caece6edd60ee09651873c3162b27e3b8e28f407021f8bee28a559

    • SSDEEP

      24576:rQa+rRep38knZGbO4oFya8ZbRxaiXvnEc3Suvb7sNPwEFfTPCRi4Vz:rZ+rRe3zn4ioa8ZbRMiXO07sNPwERWV

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks