Behavioral task
behavioral1
Sample
5e288df18d5f3797079c4962a447509fd4a60e9b76041d0b888bcf32f8197991.msi
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5e288df18d5f3797079c4962a447509fd4a60e9b76041d0b888bcf32f8197991.msi
Resource
win10v2004-20220812-en
General
-
Target
5e288df18d5f3797079c4962a447509fd4a60e9b76041d0b888bcf32f8197991.msi
-
Size
967KB
-
MD5
3c56483e8c0788b2862bfe0c490c865a
-
SHA1
3f541fbc9e927a718c1745b4b8d02f3768aa3fd2
-
SHA256
5e288df18d5f3797079c4962a447509fd4a60e9b76041d0b888bcf32f8197991
-
SHA512
ab45313032b3822b919b8a782422f15fd60f8c46cc61bb3294d937d98821795ab3b5089873419bbd9ada99357691759653a6fe50ba110ef04eee2bffba68ffe1
-
SSDEEP
24576:GGOw7MAFZjiaZBuc2g4jocf6p2XHXNNpbCClCtRGLovJs:QwHnjis3M6p2X/pbC7ALL
Malware Config
Signatures
-
Ratty Rat payload 1 IoCs
Processes:
resource yara_rule sample family_ratty -
Ratty family
-
Detect jar appended to MSI 1 IoCs
Processes:
resource yara_rule sample jar_in_msi
Files
-
5e288df18d5f3797079c4962a447509fd4a60e9b76041d0b888bcf32f8197991.msi.msi