General
-
Target
CellikRat 4.0.1.7z
-
Size
312.4MB
-
Sample
250207-2pv9vasrfp
-
MD5
9d602c95fc1fa17dfc8fc10071849b6b
-
SHA1
a1f9f65f7789ee61fe0fd2b0287ce9e870e41dda
-
SHA256
0ca290414a9c534768b3d2f227f34f4e7e5847e8021074c33e19012e7451c99a
-
SHA512
efd8c296510986e5f8942e13551b06608cc926f16906af10994d9a691ecfa95293a59af434de8c81cb78f774077fc19099607eb2b23fd382aff347e504e0a10d
-
SSDEEP
6291456:bt89et6TpL2RyM/iwVVE3BHlBlUyFp1P5NpoZYsq/M1lL5:p89f+YwVi9lBqyFSY/M1ll
Behavioral task
behavioral1
Sample
CellikRat 4.0.1.7z
Resource
win11-20250207-en
Malware Config
Targets
-
-
Target
CellikRat 4.0.1.7z
-
Size
312.4MB
-
MD5
9d602c95fc1fa17dfc8fc10071849b6b
-
SHA1
a1f9f65f7789ee61fe0fd2b0287ce9e870e41dda
-
SHA256
0ca290414a9c534768b3d2f227f34f4e7e5847e8021074c33e19012e7451c99a
-
SHA512
efd8c296510986e5f8942e13551b06608cc926f16906af10994d9a691ecfa95293a59af434de8c81cb78f774077fc19099607eb2b23fd382aff347e504e0a10d
-
SSDEEP
6291456:bt89et6TpL2RyM/iwVVE3BHlBlUyFp1P5NpoZYsq/M1lL5:p89f+YwVi9lBqyFSY/M1ll
Score7/10-
Executes dropped EXE
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-