Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Java.Ratty.2.15503.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Java.Ratty.2.15503.dll
Resource
win10v2004-20220414-en
General
-
Target
SecuriteInfo.com.Java.Ratty.2.15503.13889
-
Size
740KB
-
MD5
c361d2beccf54f9c0399a5dc1366c889
-
SHA1
1744e717854b7308abf1064c98c3da1bc5084035
-
SHA256
736749551049aeab7013609e8a24a3dfb999f5619d395e4e021d566d11702b03
-
SHA512
c148e7062a6a94161b266c709b907c8d16b2d9aa019291db17c28dd054eaf3a5fee07f81cb98f3bd61f7dca33d308ea8845f06016ccc07f0725c115542919376
-
SSDEEP
12288:1iazH1BpQc2Yf4U4oXMf6p2XHJZNNNzbCClCA+jp02GmWhJnav5jUG:1iaZBuc2g4jocf6p2XHXNNpbCClCtRG0
Malware Config
Signatures
-
Ratty Rat Payload 1 IoCs
Processes:
resource yara_rule sample family_ratty -
Ratty family
Files
-
SecuriteInfo.com.Java.Ratty.2.15503.13889.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 329KB - Virtual size: 329KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ