Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
14-05-2024 17:35
General
-
Target
01598af6a70a105d03e7759fef28f580_NeikiAnalytics.exe
-
Size
337KB
-
MD5
01598af6a70a105d03e7759fef28f580
-
SHA1
062acc53741d0aa41c3b5db443bdfcf8b1024690
-
SHA256
affa3dfd1f5a12c36dc46f95339fad0be78922aba6f27775da779b33fc4ad09e
-
SHA512
87f0431e4a63287b8bb6441f1a1fc2b45ff1b00df07248ae0e7951ca11e4e16c7e6505e249af32406c91b5b1059b3211f11b97fa6df1ae2aee7d9f146bbfdd87
-
SSDEEP
6144:N13ux89dP66zqTyRYD2K5CvUr1PbGo74xvVNqY0DX:Sx89EpDD2K5OUBPwNwZ
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
ZGRat
ZGRat is remote access trojan written in C#.
-
Suspicious use of AdjustPrivilegeToken 31 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\01598af6a70a105d03e7759fef28f580_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\01598af6a70a105d03e7759fef28f580_NeikiAnalytics.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
360KB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
1.0MB
-
Filesize
72KB
-
Filesize
240KB
-
Filesize
1.7MB
-
Filesize
8KB
-
Filesize
10.8MB