ratty | 2436fa28a278522c298b3a398ddc553c96c4be29ae7b433a999ad49ac71d656c | Triage

Submit
Reports

Overview

overview

Static

static

spnxsdsnu.jar

windows7_x64

1

spnxsdsnu.jar

windows10_x64

Sharing

General

Target

spnxsdsnu.jar
Size

332KB
Sample

211015-dzrseabcaj
MD5

af7f264ed40f293a01ee685ee7d42daf
SHA1

a20caef9550c2ae144529b60598b5f58e63a409a
SHA256

2436fa28a278522c298b3a398ddc553c96c4be29ae7b433a999ad49ac71d656c
SHA512

05a060fe3d4b9f92180987d742e5ecad0deb1c5d2cbb1deec0fb31af8ddc5aa867b73ac0b9af02a764c453ba50fc4e9bd6d42b83b294a9e9bcf91b32c34ded7d

Score

10^/10

ratty persistence rat trojan

Static task

static1

Behavioral task

behavioral1

Sample

spnxsdsnu.jar

Resource

win7-en-20211014

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

spnxsdsnu.jar

Resource

win10-en-20210920

ratty persistence rat trojan

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  spnxsdsnu.jar
- Size
  
  332KB
- MD5
  
  af7f264ed40f293a01ee685ee7d42daf
- SHA1
  
  a20caef9550c2ae144529b60598b5f58e63a409a
- SHA256
  
  2436fa28a278522c298b3a398ddc553c96c4be29ae7b433a999ad49ac71d656c
- SHA512
  
  05a060fe3d4b9f92180987d742e5ecad0deb1c5d2cbb1deec0fb31af8ddc5aa867b73ac0b9af02a764c453ba50fc4e9bd6d42b83b294a9e9bcf91b32c34ded7d
Score

10^/10

ratty persistence rat trojan
- Ratty
  Ratty is an open source Java Remote Access Tool.
  trojan rat ratty
- Ratty Rat Payload
- Drops startup file
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Hidden Files and Directories

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

rattypersistencerattrojan

© 2018-2024

Terms | Privacy