resource	yara_rule
behavioral5/memory/1208-9-0x0000000003440000-0x00000000034C2000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-10-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-11-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-13-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-15-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-17-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-19-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-21-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-23-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-25-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-27-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-29-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-31-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-33-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-35-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-37-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-39-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-41-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-43-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-45-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-47-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-49-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-51-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-53-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-55-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-57-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-59-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-61-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-63-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-65-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-67-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-69-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-71-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1
behavioral5/memory/1208-73-0x0000000003440000-0x00000000034BC000-memory.dmp	family_zgrat_v1

pid	process
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe
1208	75bff99becc32bcbe56efbe7a75f4d45.exe

description	pid	process	target process
PID 1208 wrote to memory of 1356	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 1356	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 1356	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 2276	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 2276	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 2276	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 4732	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 4732	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 4732	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 4928	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 4928	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 4928	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 1684	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 1684	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 1684	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 432	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 432	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 432	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 2740	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 2740	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 2740	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 2900	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 2900	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 2900	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 2372	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 2372	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 2372	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 2756	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 2756	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe
PID 1208 wrote to memory of 2756	1208	75bff99becc32bcbe56efbe7a75f4d45.exe	75bff99becc32bcbe56efbe7a75f4d45.exe

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads