resource	yara_rule
behavioral2/memory/2816-6-0x0000000000AC0000-0x0000000000B42000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-7-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-8-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-10-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-12-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-14-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-16-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-22-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-20-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-18-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-24-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-26-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-30-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-28-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-32-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-36-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-34-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-38-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-42-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-40-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-46-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-44-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-48-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-50-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-54-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-52-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-56-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-58-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-62-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-60-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-64-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-66-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-68-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1
behavioral2/memory/2816-70-0x0000000000AC0000-0x0000000000B3C000-memory.dmp	family_zgrat_v1

pid	process
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe
2816	75bff99becc32bcbe56efbe7a75f4d45.exe

description	pid	process	target process
PID 2816 wrote to memory of 1920	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1920	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1920	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1920	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1924	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1924	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1924	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1924	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1628	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1628	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1628	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1628	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1100	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1100	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1100	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1100	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2116	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2116	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2116	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2116	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2132	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2132	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2132	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2132	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2076	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2076	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2076	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2076	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2276	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2276	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2276	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2276	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1088	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1088	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1088	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 1088	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2268	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2268	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2268	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 2816 wrote to memory of 2268	2816	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads