Analysis
-
max time kernel
1670s -
max time network
1486s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
28-10-2024 15:16
General
-
Target
GameModeX.exe
-
Size
1.7MB
-
MD5
4ad581a2e48ba58bd79c3256fa023220
-
SHA1
15a8a3222e20a0681ae6189f9d20238994556905
-
SHA256
b5c579eec1362555ac716cee6788377179726b4f0f39823bf5fdc8099bc74769
-
SHA512
2930bb8dbbb7ce34e1999c7008c5689fc25d1d72bd1889415f9ce89ec4b91f95aa838063f5c7c8f1584d8cf4c37ac6b150cd8807e7d65c2942d6104fc9be056d
-
SSDEEP
24576:/E3mO8ElMvLzcEk1wkBmOxDeRJV1t4sGYazh+a+x5tImfjxDgxjUcYKoyBPvA/Rm:93cEk1/xDebV1t4sGY1ayzjxgCsI/U
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V2 1 IoCs
-
ZGRat
ZGRat is remote access trojan written in C#.
-
Zgrat family
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\GameModeX.exe"C:\Users\Admin\AppData\Local\Temp\GameModeX.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
1.7MB
-
Filesize
10.8MB
-
Filesize
1.3MB
-
Filesize
32KB
-
Filesize
32KB
-
Filesize
88KB
-
Filesize
10.8MB
-
Filesize
10.8MB