General

  • Target

    tracking_details2.jar

  • Size

    332KB

  • Sample

    201107-7nmhh8pvvn

  • MD5

    8fa5ec1d2c2e4af02168b9f544523f49

  • SHA1

    bc65f27ca5c3b665e800dc07626bcd66604af7cb

  • SHA256

    cd8b8bd578f20672dee0a5189d4869055784e9f23d4fcda28ceeaa25079be3a6

  • SHA512

    89bffc7fdacf9821a2245b0985dda349c5ecea63563263a2050a40b33cf29d4b33d765595d91b7b66075bb3481e1ab15e114f7ccfae55eb512e16b96c295e664

Malware Config

Targets

    • Target

      tracking_details2.jar

    • Size

      332KB

    • MD5

      8fa5ec1d2c2e4af02168b9f544523f49

    • SHA1

      bc65f27ca5c3b665e800dc07626bcd66604af7cb

    • SHA256

      cd8b8bd578f20672dee0a5189d4869055784e9f23d4fcda28ceeaa25079be3a6

    • SHA512

      89bffc7fdacf9821a2245b0985dda349c5ecea63563263a2050a40b33cf29d4b33d765595d91b7b66075bb3481e1ab15e114f7ccfae55eb512e16b96c295e664

    • Ratty

      Ratty is an open source Java Remote Access Tool.

    • Ratty Rat Payload

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks