resource	yara_rule
behavioral1/memory/1936-5-0x00000000009F0000-0x0000000000A72000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-6-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-7-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-9-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-11-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-13-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-15-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-17-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-19-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-21-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-23-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-25-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-27-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-29-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-31-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-33-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-35-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-37-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-39-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-41-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-43-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-45-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-47-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-49-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-53-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-55-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-57-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-51-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-59-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-61-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-63-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-65-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-67-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1
behavioral1/memory/1936-69-0x00000000009F0000-0x0000000000A6C000-memory.dmp	family_zgrat_v1

pid	process
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe
1936	75bff99becc32bcbe56efbe7a75f4d45.exe

description	pid	process	target process
PID 1936 wrote to memory of 2896	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2896	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2896	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2896	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2676	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2676	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2676	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2676	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2908	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2908	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2908	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2908	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2252	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2252	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2252	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2252	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 1812	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 1812	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 1812	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 1812	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2396	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2396	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2396	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2396	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2400	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2400	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2400	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2400	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 1840	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 1840	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 1840	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 1840	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2488	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2488	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2488	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 2488	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 660	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 660	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 660	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1936 wrote to memory of 660	1936	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads