Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
08/05/2024, 14:22
General
-
Target
BaixaCnab.exe
-
Size
167KB
-
MD5
41607f695606d94bd05bbcad789169f6
-
SHA1
ee3f31ea53af0b4c6ccbefce7a5a499a16ae8dc9
-
SHA256
8c2f65255efe842f8e325accc6b506478c62c7269c3a1099c5e8ec3cb1df7b42
-
SHA512
57d9fcaee548bc9d039c5621897a9e5d61e9d3d3937016fcb2cfadc104747398b6a6b429c2bf0376449aac9aa7d7ae089c0759ce38253ce1015fa93b30059a71
-
SSDEEP
3072:QZuq+bkHPcgZ/7e0X0FrpEBSOGnMNd3H:bbkV/7e0kFrQSdM
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
ZGRat
ZGRat is remote access trojan written in C#.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BaixaCnab.exe"C:\Users\Admin\AppData\Local\Temp\BaixaCnab.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1688 -s 7122⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
192KB
-
Filesize
8.2MB
-
Filesize
9.9MB
-
Filesize
26.6MB
-
Filesize
200KB
-
Filesize
4KB
-
Filesize
9.9MB