Analysis
-
max time kernel
140s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
20-07-2024 22:28
Behavioral task
behavioral1
Sample
BoRat Rat (extract.me).zip
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
BoRat Rat (extract.me).zip
Resource
win10v2004-20240709-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
BoRat Rat (extract.me).zip
-
Size
14.2MB
-
MD5
dbad414b7071c0f481388c668df8ad4a
-
SHA1
6ef29b659e6faa2cc48320975088cb16f435f7bc
-
SHA256
1ffa7e9f1f42930e11c75b2e9692f95776a4b100bc969cf29cc81ae267499c81
-
SHA512
7e653b6ef8c7ee39067fdf51d0e213146d5ad4e32a8a154c995d53d343083cf2ac168f2fd0378302f17bf8b5200258e931c96fc6ba236718a002d7215651ec96
-
SSDEEP
393216:NTqIleyK9cv2LnAuw34UoGyQdg9XgQb4Ehdvs9CIc:NTIyEy27AuwovUeQG4Qdk9Nc
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\BoRat Rat (extract.me).zip"1⤵PID:916
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1576