Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
01-01-2024 10:06
General
-
Target
1bb445595d0ba608445d99f434c82c4b.exe
-
Size
772KB
-
MD5
1bb445595d0ba608445d99f434c82c4b
-
SHA1
359a1462d1f386d7147d1d2211f740722932a9be
-
SHA256
f980b2377c9cd2ff4415608fff97031062be1788bfd981ae55f9e92c4985ada4
-
SHA512
6805cfcf3c1600a270b637610219e2b975672a460ca6c88117a9f52c998e88a120a768a8d981adeb9f8512931ae90a7e34c2a157b880697e8f486e0507b552f5
-
SSDEEP
12288:FZRc9ADPMIN1nNyZQoJmyB0jxPeb2kdpkiss8LXAoz6JE0Yg6XyQLV8D:FzaINut4yB0FOdssMXAw6jYg6CQLVu
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 31 IoCs
-
ZGRat
ZGRat is remote access trojan written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1bb445595d0ba608445d99f434c82c4b.exe"C:\Users\Admin\AppData\Local\Temp\1bb445595d0ba608445d99f434c82c4b.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
792KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
536KB
-
Filesize
256KB
-
Filesize
504KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
480KB
-
Filesize
256KB
-
Filesize
256KB