ratty | SecuriteInfo[.]com[.]Exploit[.]AppendedJar[.]1[.]Gen[.]26250[.]6479 | Triage

Sharing

General

Target

SecuriteInfo.com.Exploit.AppendedJar.1.Gen.26250.6479
Size

865KB
MD5

7ff3f6584da9ee99654776ae853fa158
SHA1

a40ec7f8788c7ffbb7ad1bc50454b73edd95393c
SHA256

b6079b972c7bfe1b631b7e4776ce306b3cd818e479ca5cf1b53ca4345b4fd854
SHA512

50cb16e7242c0227e90afc934baac2b375584c9f8d666300184d6c7ce628bab6037d83ec28268cb3410ae8b01d273875ee31661b2ec462d51acc08601eb81a73

Score

10^/10

ratty

Malware Config

Signatures

Ratty Rat Payload 1 IoCs

Processes:

resource yara_rule

sample family_ratty
Ratty family
ratty
Detect jar appended to MSI 1 IoCs

Processes:

resource yara_rule

sample jar_in_msi
JavaScript code in executable 1 IoCs

Processes:

resource yara_rule

sample js

Files

SecuriteInfo.com.Exploit.AppendedJar.1.Gen.26250.6479
.msi