runningrat | th520[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
th520.exe
Size 96KB
Sample210211-b3vr83s2n2
SHA256 31d5bcd2e4ecd330a56fbef1826e7201532311c9a57ee44352a746ea8271a778
MD5 fbbc4c6ce85624e7c35ce3f5ca988bbe
SHA1 346102549e0c1f9604266f8bda9f2fbd9ddf216b
SHA512 c3fc14a7bbdedc1cfbda01d0e624d0ea6384427828c6cbff415bb2d5da5363d930a456e979f371f45835305f40d4b2a0a190c2355b624e042c4035ca6a067ded
MD5 SHA1 SHA512

Score

10^/10

runningrat

Malware Config

Signatures

RunningRat Payload 1 IoCs

resource	yara_rule
sample	family_runningrat

Runningrat family
runningrat

File Explorer

th520.exe

.exe 96KB

th520.exe

SHA256 31d5bcd2e4ecd330a56fbef1826e7201532311c9a57ee44352a746ea8271a778
MD5 fbbc4c6ce85624e7c35ce3f5ca988bbe
SHA1 346102549e0c1f9604266f8bda9f2fbd9ddf216b
SHA512 c3fc14a7bbdedc1cfbda01d0e624d0ea6384427828c6cbff415bb2d5da5363d930a456e979f371f45835305f40d4b2a0a190c2355b624e042c4035ca6a067ded
MD5 SHA1 SHA512

windows x86

RunningRat Payload