Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

767ba9a305...2f.exe

windows7-x64

10

767ba9a305...2f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    767ba9a305c7ecb8bf1779211e93bd673a8520015e64013f6e43a7ddd355f92f.exe

  • Size

    1.6MB

  • Sample

    240213-ddjjxaec57

  • MD5

    d76fbdd502935147727b658a1f54606b

  • SHA1

    5b34d209f664bb04f4a9fa431159cc1e24ccf641

  • SHA256

    767ba9a305c7ecb8bf1779211e93bd673a8520015e64013f6e43a7ddd355f92f

  • SHA512

    c460b4706f85507d12b00a878585db4fbdeaca2abe9fe22239c67dbab9e12dbb3b64f212e5d0461b37254ce02bbcdbe0a7b3862155f387baebf3e6ca16f979d2

  • SSDEEP

    24576:Bu3lUF+zynY3kq1EP07HlzrGyiXoX/njc+9cRQ38mG:Bu+Y3kqJFzrcoX/njB9cY8

Score
10/10
zgratpersistencerat

Malware Config

Targets

    • Target

      767ba9a305c7ecb8bf1779211e93bd673a8520015e64013f6e43a7ddd355f92f.exe

    • Size

      1.6MB

    • MD5

      d76fbdd502935147727b658a1f54606b

    • SHA1

      5b34d209f664bb04f4a9fa431159cc1e24ccf641

    • SHA256

      767ba9a305c7ecb8bf1779211e93bd673a8520015e64013f6e43a7ddd355f92f

    • SHA512

      c460b4706f85507d12b00a878585db4fbdeaca2abe9fe22239c67dbab9e12dbb3b64f212e5d0461b37254ce02bbcdbe0a7b3862155f387baebf3e6ca16f979d2

    • SSDEEP

      24576:Bu3lUF+zynY3kq1EP07HlzrGyiXoX/njc+9cRQ38mG:Bu+Y3kqJFzrcoX/njB9cY8

    Score
    10/10
    zgratpersistencerat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks