ratty | 55ad649a064b42a3dacdf746697b3c9462929569a3e2cf23278b5aa7145356fc | Triage

Sharing

General

Target

55ad649a064b42a3dacdf746697b3c9462929569a3e2cf23278b5aa7145356fc
Size

155KB
Sample

220520-qs4jvaeac3
MD5

8357f301e6ae06389b7108b08796d20b
SHA1

3aca07fea18b1d9947dcc5abe3aed4d6d06b2a40
SHA256

55ad649a064b42a3dacdf746697b3c9462929569a3e2cf23278b5aa7145356fc
SHA512

ce0b9a10766f0cd00df5d346c0b7efeb305b8d77e5f6166225ddcc3e062db64d1fd0f5b4f6b310470cf1110d9cb2e55a041b1e5dde58506e67d0de4c9c6afdb2

Score

10^/10

ratty persistence

Malware Config

Targets

- Target
  
  55ad649a064b42a3dacdf746697b3c9462929569a3e2cf23278b5aa7145356fc
- Size
  
  155KB
- MD5
  
  8357f301e6ae06389b7108b08796d20b
- SHA1
  
  3aca07fea18b1d9947dcc5abe3aed4d6d06b2a40
- SHA256
  
  55ad649a064b42a3dacdf746697b3c9462929569a3e2cf23278b5aa7145356fc
- SHA512
  
  ce0b9a10766f0cd00df5d346c0b7efeb305b8d77e5f6166225ddcc3e062db64d1fd0f5b4f6b310470cf1110d9cb2e55a041b1e5dde58506e67d0de4c9c6afdb2
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2