General

  • Target

    fbyucqj.txt

  • Size

    332KB

  • Sample

    210703-nr41zpz6yj

  • MD5

    557300cb69793fff9ce90e80d5800db7

  • SHA1

    e4a9df52f70f2ce7eeb4e48f5cfd735836945b48

  • SHA256

    0cdaf2559dc07bc86ee642c3b30405dd65f4fe1254593e1b9591d5c80f179740

  • SHA512

    a484566b445f63dd5ec1a546e8ca2f45c54f4ebf800fb32c039261b3e4816634723b4cd28cc95392dfaddc4ed617e5562fa27b7038bc273a34fdd43aee388c78

Malware Config

Targets

    • Target

      fbyucqj.txt

    • Size

      332KB

    • MD5

      557300cb69793fff9ce90e80d5800db7

    • SHA1

      e4a9df52f70f2ce7eeb4e48f5cfd735836945b48

    • SHA256

      0cdaf2559dc07bc86ee642c3b30405dd65f4fe1254593e1b9591d5c80f179740

    • SHA512

      a484566b445f63dd5ec1a546e8ca2f45c54f4ebf800fb32c039261b3e4816634723b4cd28cc95392dfaddc4ed617e5562fa27b7038bc273a34fdd43aee388c78

    • Ratty

      Ratty is an open source Java Remote Access Tool.

    • Ratty Rat Payload

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks