Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e0deb2fc7b...57.exe

windows7-x64

10

e0deb2fc7b...57.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0deb2fc7bb606d0f2b1ef5f3ca8a857

  • Size

    417KB

  • Sample

    240203-2rfl6sbgc7

  • MD5

    e0deb2fc7bb606d0f2b1ef5f3ca8a857

  • SHA1

    80d044a2b2802a52cfad8daf013d2b1e0ffd55c0

  • SHA256

    3783e7365abe09c1b4fd896b059f741289c2221c6eb9fdfb8c0111da4898252a

  • SHA512

    95287080b24ec8867c2f7dcae30f71e2351b7fe05d3ca7d1c9576c0e6663682e7337b45f1873bf94a1bcb43af91787b733b308e8d606803ec099c666cfcc5ab6

  • SSDEEP

    12288:JoqhAjRgGB/9YilEgy844ZkG75tyR1hHVjvbRl:Joqa/B/9YV84mLvaLnb

Score
10/10
zgratpersistencerat

Malware Config

Targets

    • Target

      e0deb2fc7bb606d0f2b1ef5f3ca8a857

    • Size

      417KB

    • MD5

      e0deb2fc7bb606d0f2b1ef5f3ca8a857

    • SHA1

      80d044a2b2802a52cfad8daf013d2b1e0ffd55c0

    • SHA256

      3783e7365abe09c1b4fd896b059f741289c2221c6eb9fdfb8c0111da4898252a

    • SHA512

      95287080b24ec8867c2f7dcae30f71e2351b7fe05d3ca7d1c9576c0e6663682e7337b45f1873bf94a1bcb43af91787b733b308e8d606803ec099c666cfcc5ab6

    • SSDEEP

      12288:JoqhAjRgGB/9YilEgy844ZkG75tyR1hHVjvbRl:Joqa/B/9YV84mLvaLnb

    Score
    10/10
    zgratpersistencerat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks