Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    SecuriteInfo.com.Win32.PWSX-gen.24784.25099.exe

  • Size

    855KB

  • Sample

    231210-txh1gsfhfq

  • MD5

    90163fb614066a7abaa99b48bed01214

  • SHA1

    0495152453a74a29cc4effcf06e34f6b5e0c0d99

  • SHA256

    43ef89e27ca9e14fe36f2626444fd52557aa7a62c59ce2dc13e8ec4bec2a7b7b

  • SHA512

    8b2ffb990b123f87003127a9b8afb39c428d6dbad6093110455d1b4a8839b7338900e1c86908a443cbee3d8f3cf7aeed3a6b1e06c435838744a30c5d554f8dbe

  • SSDEEP

    12288:IBgOWP6i6+LhhQ0aRj1AYB5I9sT8eOQ0QpD3Ly6KZMWT8+ObVUG1ZiNZ0YapLlwn:ICgTlBPfOwI65WT8+Ob7X/HxClsfrY

Score
10/10

Malware Config

Targets

    • Target

      SecuriteInfo.com.Win32.PWSX-gen.24784.25099.exe

    • Size

      855KB

    • MD5

      90163fb614066a7abaa99b48bed01214

    • SHA1

      0495152453a74a29cc4effcf06e34f6b5e0c0d99

    • SHA256

      43ef89e27ca9e14fe36f2626444fd52557aa7a62c59ce2dc13e8ec4bec2a7b7b

    • SHA512

      8b2ffb990b123f87003127a9b8afb39c428d6dbad6093110455d1b4a8839b7338900e1c86908a443cbee3d8f3cf7aeed3a6b1e06c435838744a30c5d554f8dbe

    • SSDEEP

      12288:IBgOWP6i6+LhhQ0aRj1AYB5I9sT8eOQ0QpD3Ly6KZMWT8+ObVUG1ZiNZ0YapLlwn:ICgTlBPfOwI65WT8+Ob7X/HxClsfrY

    Score
    10/10
    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks