resource	yara_rule
behavioral1/memory/2968-6-0x0000000000290000-0x0000000000312000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-8-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-10-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-12-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-14-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-16-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-7-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-18-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-20-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-22-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-24-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-26-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-28-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-30-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-32-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-34-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-36-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-38-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-40-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-42-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-44-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-46-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-48-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-50-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-52-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-54-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-56-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-58-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-60-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-62-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-64-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-66-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-68-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1
behavioral1/memory/2968-70-0x0000000000290000-0x000000000030C000-memory.dmp	family_zgrat_v1

pid	process
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe
2968	75bff99becc32bcbe56efbe7a75f4d45.exe

description	pid	process	target process
PID 2968 wrote to memory of 2504	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2504	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2504	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2504	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2756	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2756	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2756	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2756	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2780	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2780	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2780	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2780	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2744	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2744	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2744	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2744	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2772	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2772	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2772	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2772	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2788	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2788	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2788	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2788	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2804	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2804	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2804	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2804	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2816	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2816	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2816	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2816	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 1060	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 1060	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 1060	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 1060	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2828	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2828	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2828	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2968 wrote to memory of 2828	2968	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads