Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
14-05-2024 15:32
General
-
Target
114ad98c82f045d81f4b456900e650ea316e7dda7a1d8c5396e585488986d6fe.exe
-
Size
293KB
-
MD5
edcfedc1c217b5907f6b69272e5ca98f
-
SHA1
e4bb7f3226e809c7ad1e12193ee26048cfc58790
-
SHA256
114ad98c82f045d81f4b456900e650ea316e7dda7a1d8c5396e585488986d6fe
-
SHA512
c1a9d970e7690f60eb1ad0ea85a57c942b31006db8dbbfcc46e1d0e1036ee2957f67ce205eba93b426d78dd6eb8bcf23fb713b3442ae1ab91f59a24ed6e4e626
-
SSDEEP
3072:e3MK0Jc5YQoIpwg9iO2OaiS40eBwYG3zRrYp2OplMGc8A6uHPMG7CUqkZFI0CADL:u2c5YQoI2gzai9kjJkhpuJvYuH
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
ZGRat
ZGRat is remote access trojan written in C#.
-
.NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
Processes
-
C:\Users\Admin\AppData\Local\Temp\114ad98c82f045d81f4b456900e650ea316e7dda7a1d8c5396e585488986d6fe.exe"C:\Users\Admin\AppData\Local\Temp\114ad98c82f045d81f4b456900e650ea316e7dda7a1d8c5396e585488986d6fe.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2856-0-0x0000000073F3E000-0x0000000073F3F000-memory.dmpFilesize
4KB
-
memory/2856-1-0x0000000000040000-0x0000000000090000-memory.dmpFilesize
320KB
-
memory/2856-2-0x0000000073F30000-0x000000007461E000-memory.dmpFilesize
6.9MB
-
memory/2856-3-0x0000000073F3E000-0x0000000073F3F000-memory.dmpFilesize
4KB
-
memory/2856-4-0x0000000073F30000-0x000000007461E000-memory.dmpFilesize
6.9MB