Static task
static1
Behavioral task
behavioral1
Sample
cffea33c961cf1f822ae009527b4fcaf9fb3e5c374fd470e8fee7eeaa20c3adf.msi
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
cffea33c961cf1f822ae009527b4fcaf9fb3e5c374fd470e8fee7eeaa20c3adf.msi
Resource
win10v2004-20220414-en
General
-
Target
cffea33c961cf1f822ae009527b4fcaf9fb3e5c374fd470e8fee7eeaa20c3adf
-
Size
2.2MB
-
MD5
9f266d8ad30e25b4260f24181d117c5f
-
SHA1
68744aaf74dd72c812333583e3913598da317f5d
-
SHA256
cffea33c961cf1f822ae009527b4fcaf9fb3e5c374fd470e8fee7eeaa20c3adf
-
SHA512
6148c33da7241b16eda745e18da088bde141f9b77be5e46868f4bb8dc6396a4d31ad922c1e647cf1d4fe0bd4ac9bf9a43a3c2a4a4c44bff5ccc3fb7b00fc753c
-
SSDEEP
49152:Dcmv86XH7Zbjd7QNNputFQzRA33uAc7+pbC7ALD:GeH7ZbKNNItFQzOnu+pbC7A3
Malware Config
Signatures
-
Ratty Rat Payload 1 IoCs
Processes:
resource yara_rule sample family_ratty -
Ratty family
-
Detect jar appended to MSI 1 IoCs
Processes:
resource yara_rule sample jar_in_msi
Files
-
cffea33c961cf1f822ae009527b4fcaf9fb3e5c374fd470e8fee7eeaa20c3adf.msi