Overview

overview

10

Static

static

10

SecuriteIn...07.msi

windows7_x64

6

SecuriteIn...07.msi

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Java.Ratty.2.1313.31407

  • Size

    382KB

  • Sample

    201109-taaahw7x8s

  • MD5

    3da4e6978739e9bf611dde54c12b5508

  • SHA1

    de20062fd01ae8ca3e5b2d5ae65a622eeab04ea8

  • SHA256

    d246c32f6dad5289cc2d139f10c14dc016497f4977c16faef891b693dc63d910

  • SHA512

    385c50110862b5f16a7087ade776780b380eaf1f01435c1f8ce58fb90fcc953a9ab8780315e666a0cc927d6f087faaebc0ccde95e9d68a74932c2d20850ef02e

Score
10/10
rattypersistence

Malware Config

Targets

    • Target

      SecuriteInfo.com.Java.Ratty.2.1313.31407

    • Size

      382KB

    • MD5

      3da4e6978739e9bf611dde54c12b5508

    • SHA1

      de20062fd01ae8ca3e5b2d5ae65a622eeab04ea8

    • SHA256

      d246c32f6dad5289cc2d139f10c14dc016497f4977c16faef891b693dc63d910

    • SHA512

      385c50110862b5f16a7087ade776780b380eaf1f01435c1f8ce58fb90fcc953a9ab8780315e666a0cc927d6f087faaebc0ccde95e9d68a74932c2d20850ef02e

    Score
    8/10
    persistence

    • Blacklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Modifies service

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks