Behavioral task
behavioral1
Sample
5e288df18d5f3797079c4962a447509fd4a60e9b76041d0b888bcf32f8197991.msi
Resource
win7-20221111-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
5e288df18d5f3797079c4962a447509fd4a60e9b76041d0b888bcf32f8197991.msi
Resource
win10v2004-20221111-en
windows10-2004-x64
7 signatures
150 seconds
General
-
Target
3c56483e8c0788b2862bfe0c490c865a.bin
-
Size
627KB
-
MD5
bc2859ba391d8ce438b8ea263f8d87c8
-
SHA1
bf6fde7ddba825f78802f836aed9ed2a4fa71225
-
SHA256
65949debc9240c584c463d372ec53519d99ac8491facaf179b7aff186133633b
-
SHA512
2a29cd290cd93d3bdb41922e9f1322a525a65b830e38bf1148fd56589bb245a134f3273358f433e86cac00fce0b42a5a99fafea9da9aeffccc6482edd1bf3b36
-
SSDEEP
12288:ku55eYohvZqHo8qtCx99O84KX10pizsPKGO+cYsF9t9EUPfzVyk5WPS21:z55UhBqITSs87u8+KVHt9rfzVxWK21
Score
10/10
Malware Config
Signatures
-
Ratty Rat payload 1 IoCs
Processes:
resource yara_rule static1/unpack001/5e288df18d5f3797079c4962a447509fd4a60e9b76041d0b888bcf32f8197991.msi family_ratty -
Ratty family
-
Detect jar appended to MSI 1 IoCs
Processes:
resource yara_rule static1/unpack001/5e288df18d5f3797079c4962a447509fd4a60e9b76041d0b888bcf32f8197991.msi jar_in_msi
Files
-
3c56483e8c0788b2862bfe0c490c865a.bin.zip
Password: infected
-
5e288df18d5f3797079c4962a447509fd4a60e9b76041d0b888bcf32f8197991.msi.msi