Analysis
- max time kernel
145s - max time network
110s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
07/01/2024, 19:34
General
- Target a12a5623e05524c3831b5e3679b150ac.exe
- Size 2.1MB
- Sample240107-yad58scfdr
- SHA256 9321237cc4be1ff3cd68f700e65b2f471a43bcf78a69020b88ad42161b194306
Score
10/10
Malware Config
Signatures
- Detect ZGRat V1 1 IoCs
- ZGRat
ZGRat is remote access trojan written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a12a5623e05524c3831b5e3679b150ac.exe"C:\Users\Admin\AppData\Local\Temp\a12a5623e05524c3831b5e3679b150ac.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4116-0-0x000001480B5C0000-0x000001480B7D4000-memory.dmp
memory/4116-1-0x00007FFB39C30000-0x00007FFB3A6F1000-memory.dmp
memory/4116-2-0x0000014825DA0000-0x0000014825DB0000-memory.dmp
memory/4116-3-0x00007FFB39C30000-0x00007FFB3A6F1000-memory.dmp