Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

PO 803707375.exe

windows7-x64

10

PO 803707375.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    150db7e3c65a152c3a056733e8b42451ff22f13b10c6676bf4933d6f4e0797ad.img

  • Size

    1.7MB

  • Sample

    240213-c9vrdacd5t

  • MD5

    5e24d6828feef5faaf054185f13aec63

  • SHA1

    56af94995d5336302c86fc492afd3969c4eb33c8

  • SHA256

    150db7e3c65a152c3a056733e8b42451ff22f13b10c6676bf4933d6f4e0797ad

  • SHA512

    783c9e423544cf9bb87efbcdfff97e1c162575cbc49a24bb822855f090c98299023de1a3f7b3462b8148cbdcd296907a7609f6e83fe0e54f3ac07580175af91f

  • SSDEEP

    24576:Lu3lUF+zynY3kq1EP07HlzrGyiXoX/njc+9cRQ38mG:Lu+Y3kqJFzrcoX/njB9cY8

Score
10/10
zgratpersistencerat

Malware Config

Targets

    • Target

      PO 803707375.exe

    • Size

      1.6MB

    • MD5

      d76fbdd502935147727b658a1f54606b

    • SHA1

      5b34d209f664bb04f4a9fa431159cc1e24ccf641

    • SHA256

      767ba9a305c7ecb8bf1779211e93bd673a8520015e64013f6e43a7ddd355f92f

    • SHA512

      c460b4706f85507d12b00a878585db4fbdeaca2abe9fe22239c67dbab9e12dbb3b64f212e5d0461b37254ce02bbcdbe0a7b3862155f387baebf3e6ca16f979d2

    • SSDEEP

      24576:Bu3lUF+zynY3kq1EP07HlzrGyiXoX/njc+9cRQ38mG:Bu+Y3kqJFzrcoX/njB9cY8

    Score
    10/10
    zgratpersistencerat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks