Static task
static1
Behavioral task
behavioral1
Sample
59a7e7d08911df41b3db1c6ef0d515f1bce2cd49320944198ffea3cd51f3e1c4.msi
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
59a7e7d08911df41b3db1c6ef0d515f1bce2cd49320944198ffea3cd51f3e1c4.msi
Resource
win10v2004-en-20220112
General
-
Target
59a7e7d08911df41b3db1c6ef0d515f1bce2cd49320944198ffea3cd51f3e1c4
-
Size
384KB
-
MD5
4a3d69c28c4742177d6238bc16486f0d
-
SHA1
517b70828d6c203939315d219b28502578620c17
-
SHA256
59a7e7d08911df41b3db1c6ef0d515f1bce2cd49320944198ffea3cd51f3e1c4
-
SHA512
bce9777d4d0536f793d88a7a0266386740469d2fb20f8df9e3b7127c5aeb9fcec32c0c3ae2afc143a6c7cfc7cfd139a65a3a8c3870843a93566e1402ef3e0b31
-
SSDEEP
6144:BbZjgS007NNMX/+DoklCAFNWClCA+jp02GmaZ/ZJSEPavLFjt+WO:BbZNNNzbCClCA+jp02GmWhJnav5jUt
Malware Config
Signatures
-
Ratty Rat Payload 1 IoCs
Processes:
resource yara_rule sample family_ratty -
Ratty family
-
Detect jar appended to MSI 1 IoCs
Processes:
resource yara_rule sample jar_in_msi
Files
-
59a7e7d08911df41b3db1c6ef0d515f1bce2cd49320944198ffea3cd51f3e1c4.msi