Overview

overview

10

Static

static

10

1.jar

windows10-1703-x64

10

1.jar

windows7-x64

1

1.jar

windows10-1703-x64

10

1.jar

windows10-2004-x64

10

1.jar

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1.jar

  • Size

    1.1MB

  • Sample

    241010-ew5erssgnr

  • MD5

    a5483a74a3cbf726d2ebf659247ec9c7

  • SHA1

    a9b28e22845934adff30ad44b293d714230344ea

  • SHA256

    37c49983dfd813e67d898b4088ea29e2146674aeba37059944db194a004dc2af

  • SHA512

    a651326628acade8adebeeec9c974d087f22cb8d868c98432c8f967ab4180c6beb7186c7b0b31e6428240017f360270d6ce90f31953c8fafe5dc4e5e0ecc9ad7

  • SSDEEP

    24576:dzhTX3kLlzYc4lMTboiqSr9xZXfRCUOutEUKIzWG:dzSLlUpSbYIn/Cl8zWG

Score
10/10
rattydiscoverypersistencerattrojan

Malware Config

Targets

    • Target

      1.jar

    • Size

      1.1MB

    • MD5

      a5483a74a3cbf726d2ebf659247ec9c7

    • SHA1

      a9b28e22845934adff30ad44b293d714230344ea

    • SHA256

      37c49983dfd813e67d898b4088ea29e2146674aeba37059944db194a004dc2af

    • SHA512

      a651326628acade8adebeeec9c974d087f22cb8d868c98432c8f967ab4180c6beb7186c7b0b31e6428240017f360270d6ce90f31953c8fafe5dc4e5e0ecc9ad7

    • SSDEEP

      24576:dzhTX3kLlzYc4lMTboiqSr9xZXfRCUOutEUKIzWG:dzSLlUpSbYIn/Cl8zWG

    Score
    10/10
    rattydiscoverypersistencerattrojan

    • Ratty

      Ratty is an open source Java Remote Access Tool.

      trojanratratty

    • Ratty Rat payload

    • Drops startup file

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence
    behavioral1behavioral2behavioral3behavioral4behavioral5

MITRE ATT&CK Enterprise v15

Tasks