S500 RAT.rar
- SHA256 529f77b45e5de21f087e4f7563658c29530c3e9803e915f883ac22ac9e4e2621
Overview
overview
7Static
static
7S500 RAT/S...pi.vbs
windows7-x64
1S500 RAT/S...pi.vbs
windows10-2004-x64
1S500 RAT/S...to.dll
windows7-x64
1S500 RAT/S...to.dll
windows10-2004-x64
1S500 RAT/S...cc.dll
windows7-x64
1S500 RAT/S...cc.dll
windows10-2004-x64
1S500 RAT/S...cc.exe
windows7-x64
1S500 RAT/S...cc.exe
windows10-2004-x64
1S500 RAT/S...cc.exe
windows7-x64
1S500 RAT/S...cc.exe
windows10-2004-x64
1S500 RAT/S...ip.dll
windows7-x64
1S500 RAT/S...ip.dll
windows10-2004-x64
1S500 RAT/S...ox.dll
windows7-x64
1S500 RAT/S...ox.dll
windows10-2004-x64
1S500 RAT/S...73.dll
windows7-x64
1S500 RAT/S...73.dll
windows10-2004-x64
1S500 RAT/S...I2.dll
windows7-x64
1S500 RAT/S...I2.dll
windows10-2004-x64
1S500 RAT/S...pf.dll
windows7-x64
1S500 RAT/S...pf.dll
windows10-2004-x64
1S500 RAT/S...ts.dll
windows7-x64
1S500 RAT/S...ts.dll
windows10-2004-x64
1S500 RAT/S...rk.dll
windows7-x64
1S500 RAT/S...rk.dll
windows10-2004-x64
1S500 RAT/S...on.dll
windows7-x64
1S500 RAT/S...on.dll
windows10-2004-x64
1S500 RAT/S...ws.dll
windows7-x64
1S500 RAT/S...ws.dll
windows10-2004-x64
1S500 RAT/S...in.dll
windows7-x64
1S500 RAT/S...in.dll
windows10-2004-x64
1S500 RAT/S...re.dll
windows7-x64
1S500 RAT/S...re.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
S500 RAT/S500 RAT/.peu/New Project 1/src/PebApi.vbs
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
S500 RAT/S500 RAT/.peu/New Project 1/src/PebApi.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
S500 RAT/S500 RAT/BouncyCastle.Crypto.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
S500 RAT/S500 RAT/BouncyCastle.Crypto.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
S500 RAT/S500 RAT/Compilers/tinycc/libtcc.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
S500 RAT/S500 RAT/Compilers/tinycc/libtcc.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
S500 RAT/S500 RAT/Compilers/tinycc/tcc.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
S500 RAT/S500 RAT/Compilers/tinycc/tcc.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
S500 RAT/S500 RAT/Compilers/tinycc/x86_64-win32-tcc.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
S500 RAT/S500 RAT/Compilers/tinycc/x86_64-win32-tcc.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
S500 RAT/S500 RAT/Compression7zip.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
S500 RAT/S500 RAT/Compression7zip.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
S500 RAT/S500 RAT/FastColoredTextBox.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
S500 RAT/S500 RAT/FastColoredTextBox.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
S500 RAT/S500 RAT/Gry73.dll
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
S500 RAT/S500 RAT/Gry73.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
S500 RAT/S500 RAT/Guna.UI2.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
S500 RAT/S500 RAT/Guna.UI2.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
S500 RAT/S500 RAT/LiveCharts.Wpf.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
S500 RAT/S500 RAT/LiveCharts.Wpf.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral21
Sample
S500 RAT/S500 RAT/LiveCharts.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
S500 RAT/S500 RAT/LiveCharts.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral23
Sample
S500 RAT/S500 RAT/MetroFramework.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
S500 RAT/S500 RAT/MetroFramework.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral25
Sample
S500 RAT/S500 RAT/Obfuscation.dll
Resource
win7-20240319-en
Behavioral task
behavioral26
Sample
S500 RAT/S500 RAT/Obfuscation.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral27
Sample
S500 RAT/S500 RAT/Plugins/ActiveWindows.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
S500 RAT/S500 RAT/Plugins/ActiveWindows.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral29
Sample
S500 RAT/S500 RAT/Plugins/Admin.dll
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
S500 RAT/S500 RAT/Plugins/Admin.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral31
Sample
S500 RAT/S500 RAT/Plugins/AntiMalware.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
S500 RAT/S500 RAT/Plugins/AntiMalware.dll
Resource
win10v2004-20240412-en
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
| resource | yara_rule |
|---|---|
| static1/unpack001/S500 RAT/S500 RAT/Guna.UI2.dll | agile_net |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/S500 RAT/S500 RAT/BouncyCastle.Crypto.dll |
| unpack001/S500 RAT/S500 RAT/Compilers/MinGW64/bin/gcc.exe |
| unpack001/S500 RAT/S500 RAT/Compilers/MinGW64/bin/libiconv-2.dll |
| unpack001/S500 RAT/S500 RAT/Compilers/MinGW64/bin/windres.exe |
| unpack001/S500 RAT/S500 RAT/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/cc1.exe |
| unpack001/S500 RAT/S500 RAT/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libcloog-isl-3.dll |
| unpack001/S500 RAT/S500 RAT/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libgmp-3.dll |
| unpack001/S500 RAT/S500 RAT/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libiconv-2.dll |
| unpack001/S500 RAT/S500 RAT/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libisl-10.dll |
| unpack001/S500 RAT/S500 RAT/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libmpc-2.dll |
| unpack001/S500 RAT/S500 RAT/Compilers/MinGW64/libexec/gcc/x86_64-w64-mingw32/4.9.2/libmpfr-1.dll |
| unpack001/S500 RAT/S500 RAT/Compilers/tinycc/libtcc.dll |
| unpack001/S500 RAT/S500 RAT/Compilers/tinycc/tcc.exe |
| unpack001/S500 RAT/S500 RAT/Compilers/tinycc/x86_64-win32-tcc.exe |
| unpack001/S500 RAT/S500 RAT/Compression7zip.dll |
| unpack001/S500 RAT/S500 RAT/FastColoredTextBox.dll |
| unpack001/S500 RAT/S500 RAT/Gry73.dll |
| unpack001/S500 RAT/S500 RAT/LiveCharts.Wpf.dll |
| unpack001/S500 RAT/S500 RAT/LiveCharts.dll |
| unpack001/S500 RAT/S500 RAT/MetroFramework.dll |
| unpack001/S500 RAT/S500 RAT/Obfuscation.dll |
| unpack001/S500 RAT/S500 RAT/QuickLZLibrary.dll |
| unpack001/S500 RAT/S500 RAT/S500Rat Cracked.exe |
| unpack001/S500 RAT/S500 RAT/Socks5.dll |
| unpack001/S500 RAT/S500 RAT/SunnyUI.Common.dll |
| unpack001/S500 RAT/S500 RAT/SunnyUI.dll |
| unpack001/S500 RAT/S500 RAT/Svg.dll |
| unpack001/S500 RAT/S500 RAT/Tulpep.NotificationWindow.dll |
| unpack001/S500 RAT/S500 RAT/Vestris.ResourceLib.dll |
| unpack001/S500 RAT/S500 RAT/WinMic.dll |
| unpack001/S500 RAT/S500 RAT/WinSound.dll |
| unpack001/S500 RAT/S500 RAT/cGeoIp.dll |
| unpack001/S500 RAT/S500 RAT/dnlib.dll |
| unpack001/S500 RAT/S500 RAT/initialization.dll |
| unpack001/S500 RAT/S500 RAT/lz4.AnyCPU.loader.dll |
| unpack001/S500 RAT/S500 RAT/protobuf-net.dll |
| unpack001/S500 RAT/S500 RAT/zxing.dll |
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
Nov 4, 2020
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
count=2, id=4, version=8047,
count=1, id=14, version=7299,
count=11, id=10, version=8047,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=53, id=1, productName=Unmarked objects,
count=1, id=260, productName=VS2019 v16.9.2 build 29913, version=29913,
count=3, productName=Unmarked objects (old),
count=1, id=255, productName=VS2019 v16.9.2 build 29913, version=29913,
count=1, id=258, productName=VS2019 v16.9.2 build 29913, version=29913,
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.
Unsigned PE
Checks for missing Authenticode signature.