Overview

overview

10

Static

static

FollowPost.js

windows7_x64

10

FollowPost.js

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FollowPost.js

  • Size

    2.9MB

  • Sample

    210703-y255fy5wp6

  • MD5

    765e5b24dc0aaf8fca72b00f512e41ad

  • SHA1

    2ea472b2eeb1f6676e4d2ce4b7cbb8e0d645b227

  • SHA256

    75465268a123c2219abb78be39d792ddfa3eb6619c3247a321fe298e52b715c9

  • SHA512

    6b515716ce6a1798ca410736d0b22812ce86511ddfa537b7f1e1fd8c8b6f65bb72f0e84fadb9844414dfcd30692e3c7ab44a8b93398e6ae4e1e98e5055bb2485

Score
10/10
rattypersistencerattrojan

Malware Config

Targets

    • Target

      FollowPost.js

    • Size

      2.9MB

    • MD5

      765e5b24dc0aaf8fca72b00f512e41ad

    • SHA1

      2ea472b2eeb1f6676e4d2ce4b7cbb8e0d645b227

    • SHA256

      75465268a123c2219abb78be39d792ddfa3eb6619c3247a321fe298e52b715c9

    • SHA512

      6b515716ce6a1798ca410736d0b22812ce86511ddfa537b7f1e1fd8c8b6f65bb72f0e84fadb9844414dfcd30692e3c7ab44a8b93398e6ae4e1e98e5055bb2485

    Score
    10/10
    rattyrattrojanpersistence

    • Ratty

      Ratty is an open source Java Remote Access Tool.

      trojanratratty

    • Ratty Rat Payload

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks