b47c77d237243747a51dd02d836444ba067cf6cc4b8b3344e5cf791f5f41d20e.zip
- SHA256 461fd63e7113ef8e6cfef0be9a3735a3be36a6d662e9d3aa5b44886da2eb56f7
Behavioral task
behavioral1
Sample
b47c77d237243747a51dd02d836444ba067cf6cc4b8b3344e5cf791f5f41d20e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b47c77d237243747a51dd02d836444ba067cf6cc4b8b3344e5cf791f5f41d20e.exe
Resource
win10-20231220-en
Behavioral task
behavioral3
Sample
b47c77d237243747a51dd02d836444ba067cf6cc4b8b3344e5cf791f5f41d20e.exe
Resource
win10v2004-20231215-en
| resource | yara_rule |
|---|---|
| static1/unpack001/b47c77d237243747a51dd02d836444ba067cf6cc4b8b3344e5cf791f5f41d20e.exe | asyncrat |
BoratRAT is an all-in-one malware toolkit that is capable of a variety of destructive activities, including acting as a ransomware, and performing credential theft.
| resource | yara_rule |
|---|---|
| static1/unpack001/b47c77d237243747a51dd02d836444ba067cf6cc4b8b3344e5cf791f5f41d20e.exe | family_boratrat |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/b47c77d237243747a51dd02d836444ba067cf6cc4b8b3344e5cf791f5f41d20e.exe |
Async RAT payload
Unsigned PE
Checks for missing Authenticode signature.