Static task
static1
Behavioral task
behavioral1
Sample
ffbb522721eb4c518fe199d0cd60da52875933a5171b3d0ff0e1f855834b02f9.msi
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
ffbb522721eb4c518fe199d0cd60da52875933a5171b3d0ff0e1f855834b02f9.msi
Resource
win10v2004-en-20220112
General
-
Target
ffbb522721eb4c518fe199d0cd60da52875933a5171b3d0ff0e1f855834b02f9
-
Size
384KB
-
MD5
781379eaa915fc31b506737317c84368
-
SHA1
a8e531220a3cb652feb600944a357b614adda2b4
-
SHA256
ffbb522721eb4c518fe199d0cd60da52875933a5171b3d0ff0e1f855834b02f9
-
SHA512
f0c9081a58f19f997deeae4b1c9d69ce87e2be91f33168727687a88f04f59369561342cc12bbc0bed5d0675ea2ff1804827dfb78d07148069c14620e0b37983b
-
SSDEEP
6144:BbZjgS007NNMX/+DoklCAFNWClCA+jp02GmaZ/ZJSEPavLFjt+WO:BbZNNNzbCClCA+jp02GmWhJnav5jU5
Malware Config
Signatures
-
Ratty Rat Payload 1 IoCs
Processes:
resource yara_rule sample family_ratty -
Ratty family
-
Detect jar appended to MSI 1 IoCs
Processes:
resource yara_rule sample jar_in_msi
Files
-
ffbb522721eb4c518fe199d0cd60da52875933a5171b3d0ff0e1f855834b02f9.msi