Analysis
- max time kernel
147s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
01/04/2024, 23:02
General
- Target dcddcc30b20e45b6c7df7f7ad6b4a20b.exe
- Size 334KB
- Sample240401-2z33faab32
- SHA256 547c07702129ea5e0ae2fb48e841c74ce957a4fa3f1c3742e588fe84c494232b
Score
10/10
Malware Config
Signatures
- Detect ZGRat V1 1 IoCs
- ZGRat
ZGRat is remote access trojan written in C#.
- .NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
Processes
-
C:\Users\Admin\AppData\Local\Temp\dcddcc30b20e45b6c7df7f7ad6b4a20b.exe"C:\Users\Admin\AppData\Local\Temp\dcddcc30b20e45b6c7df7f7ad6b4a20b.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/556-1-0x00000000748D0000-0x0000000075080000-memory.dmp
memory/556-0-0x0000000000780000-0x00000000007DA000-memory.dmp
memory/556-2-0x0000000005200000-0x0000000005210000-memory.dmp
memory/556-3-0x00000000748D0000-0x0000000075080000-memory.dmp
memory/556-4-0x0000000005200000-0x0000000005210000-memory.dmp