Analysis
-
max time kernel
143s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
07-01-2024 01:00
General
-
Target
479de94fbadd83fce799ed3389da1ce5.exe
-
Size
718KB
-
MD5
479de94fbadd83fce799ed3389da1ce5
-
SHA1
4ae4c57faeab4e3b4cbf07f34c0cb12f542bc422
-
SHA256
1c29ee414b011a411db774015a98a8970bf90c3475f91f7547a16a8946cd5a81
-
SHA512
ca9aa4a42e762c430713ead37dddba74f1dac806cdf9282c3a06a6632c2f0e3e22d5754c989fdd743fa5df0ae26bb99179faf08da3c1d5735d6bed7826842e0f
-
SSDEEP
12288:qlALj79bDcDn7T9mWM+QirAsLyjgeUhDlhcfK56bKIy6Sa5iWK21lm2NRm05g6F:WAvhDcDVMGrAsLmbtfdbOl8R9/
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 34 IoCs
-
ZGRat
ZGRat is remote access trojan written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\479de94fbadd83fce799ed3389da1ce5.exe"C:\Users\Admin\AppData\Local\Temp\479de94fbadd83fce799ed3389da1ce5.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.7MB
-
Filesize
744KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
64KB
-
Filesize
688KB
-
Filesize
480KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB