Static task
static1
Behavioral task
behavioral1
Sample
8b96aef3600697f94165242dc424cd98d12a68911a959021b161ba9c8500ca1f.msi
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
8b96aef3600697f94165242dc424cd98d12a68911a959021b161ba9c8500ca1f.msi
Resource
win10v2004-en-20220113
General
-
Target
8b96aef3600697f94165242dc424cd98d12a68911a959021b161ba9c8500ca1f
-
Size
382KB
-
MD5
40cd765c69ec60012bf6b4213aa35d76
-
SHA1
8c1fe03096e612864e3300531430655316aac51a
-
SHA256
8b96aef3600697f94165242dc424cd98d12a68911a959021b161ba9c8500ca1f
-
SHA512
c2e3185345785c06848ca1d23ecd662749a4786b84259f421ad580bbc1a50b1d3941a11f48dd4dffec37c9b62607ef01ce99d05901aa1965a046db128c158d41
-
SSDEEP
6144:01kCxZjgS007NNMX/+DoklCAFNWClCA+jp02GmaZ/ZJSEPavLFjt+Wk:06CxZNNNzbCClCA+jp02GmWhJnav5jUf
Malware Config
Signatures
-
Ratty Rat Payload 1 IoCs
Processes:
resource yara_rule sample family_ratty -
Ratty family
-
Detect jar appended to MSI 1 IoCs
Processes:
resource yara_rule sample jar_in_msi
Files
-
8b96aef3600697f94165242dc424cd98d12a68911a959021b161ba9c8500ca1f.msi