Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cd2cc1403c...69.exe

windows7-x64

10

cd2cc1403c...69.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    93be4bd1caaeeb78bae5c25a00e4b5f83ff35f36c46fb53587462979877f96ab

  • Size

    626KB

  • Sample

    240417-sasezadb36

  • MD5

    00c00d6fbfaab4283f0a5baf07be61a8

  • SHA1

    cc5fe162da26eedd31cdee0928af3595c81a7add

  • SHA256

    93be4bd1caaeeb78bae5c25a00e4b5f83ff35f36c46fb53587462979877f96ab

  • SHA512

    4b80417b503e7db73a7ec54004de0895d3b5e3f785f8c163235616ada4f8a3b07111548ad5096b7b7acecbe47d859f38f8008b2f53fb81f42f978e63072dbcec

  • SSDEEP

    12288:C17twu1lElBWCyU8gn7Cj2WMVfuh2TkZB/t9rvzDyjY+:G7trvElrTnuj2xlqdZRrDoH

Score
10/10
zgratrat

Malware Config

Targets

    • Target

      cd2cc1403cb829e7d7454a3a80d9875834bd3b0837e56493369f2d842bf3f569.exe

    • Size

      631KB

    • MD5

      eec03d362a4c66fe6ac8064ae68bda50

    • SHA1

      8aa051b9c7f201eb9504fb7023bbc5ffa2458293

    • SHA256

      cd2cc1403cb829e7d7454a3a80d9875834bd3b0837e56493369f2d842bf3f569

    • SHA512

      e6f07b5171fee9fa534f57376aaf6061e541da4ad9cee2e50b3d2ee3eed7cd2d0ed2942a479e8887dc7e4247e969b081b5ebef758854e7c62be35e2af49a8f2d

    • SSDEEP

      12288:vEZR29MfzdOwMI5F09MyMeWR+KSS2g/Pd35/K9TGH4CaxJDua:MZR29Mfzdu6LyZTIdJ/K98n6u

    Score
    10/10
    zgratrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks