General

  • Target

    ysme.exe

  • Size

    68KB

  • MD5

    63e89bf274c20c083a0fe769e948e2b4

  • SHA1

    ffe988132fc4e69e782f3fc9da8e13c281d1b302

  • SHA256

    d536aae3b7468b7598e0e5e39e004bc26a087b81e68c3fdf9205762f2bb6782a

  • SHA512

    108e8eccba50e0bc91ececd68fdfb3019e42f2d6be04885a29c5b81f288803eebc619a3ec00cf6458b87038d62bfe63ce9c642627742fded111890b3b5fc9c6b

  • SSDEEP

    768:BCB8S+OR7dOahyoHokBtqN74W7bZZmYb9PyzcjRlYlwa6NVdkPnJJMIIV:BHJaAoHoc2x7bZoYBAcQlwJdMY

Score
10/10

Malware Config

Signatures

  • RunningRat payload 1 IoCs
  • Runningrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ysme.exe
    .exe windows:4 windows x86 arch:x86

    1b365823829e2ac9bfb0aa5d328240a4


    Headers

    Imports

    Exports

    Sections