Analysis
-
max time kernel
37s -
max time network
39s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
08-12-2024 19:25
General
-
Target
WotBCReReloaded.exe
-
Size
1.3MB
-
MD5
70ccbdc044a996f4e63e9aa4d160c603
-
SHA1
bd3d018f130883f15e4d5b489f7f534a039f8122
-
SHA256
54eea6abceeda21f32af475b0307b05564f236195f8fe2115d00dfdde15279ff
-
SHA512
3eb7a436913bd12d22eea7860111b1977719ae4ffcf7ce072a79af2021421fa918775efdb967409f40f8893471013a123c277973b6339e99573e77c42d3e3477
-
SSDEEP
24576:+bP21VCeqrlscS365KL2IuBkfp63MIpVt2LgAZY4CkIu1RKaX0xjE:Z36qc8I+7+j
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V2 1 IoCs
-
ZGRat
ZGRat is remote access trojan written in C#.
-
Zgrat family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WotBCReReloaded.exe"C:\Users\Admin\AppData\Local\Temp\WotBCReReloaded.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
1.3MB
-
Filesize
10.8MB
-
Filesize
472KB
-
Filesize
120KB
-
Filesize
136KB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB