Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

bbd5434d44...5d.exe

windows7-x64

10

bbd5434d44...5d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bbd5434d44d406fa4b6b57a65248414e96a50b8000c2252552e2209fab06125d.exe

  • Size

    439KB

  • Sample

    240327-c46lpaah22

  • MD5

    f76cb49209891942d2ca806020803edc

  • SHA1

    1b1ff4a0d1113f28af22594ded0d903d1c18083f

  • SHA256

    bbd5434d44d406fa4b6b57a65248414e96a50b8000c2252552e2209fab06125d

  • SHA512

    36789735351332bc077aa5c0aeed728d2aca7cb4ad21d3c102e4ad5507a8a97775084b7d199c39d1deb36233d8cec7242aac464c4c619a92d76516ed1939b91c

  • SSDEEP

    12288:CeOQHNSzWA5z9nmoKbNlYmF/wclabxQpgEHgFbqgBr:8QH0WA5z9nhg7YmF4claaJu

Score
10/10
zgratpersistencerat

Malware Config

Targets

    • Target

      bbd5434d44d406fa4b6b57a65248414e96a50b8000c2252552e2209fab06125d.exe

    • Size

      439KB

    • MD5

      f76cb49209891942d2ca806020803edc

    • SHA1

      1b1ff4a0d1113f28af22594ded0d903d1c18083f

    • SHA256

      bbd5434d44d406fa4b6b57a65248414e96a50b8000c2252552e2209fab06125d

    • SHA512

      36789735351332bc077aa5c0aeed728d2aca7cb4ad21d3c102e4ad5507a8a97775084b7d199c39d1deb36233d8cec7242aac464c4c619a92d76516ed1939b91c

    • SSDEEP

      12288:CeOQHNSzWA5z9nmoKbNlYmF/wclabxQpgEHgFbqgBr:8QH0WA5z9nhg7YmF4claaJu

    Score
    10/10
    zgratpersistencerat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks