Overview
overview
10Static
static
10Dangerous RAT.zip
windows11-21h2-x64
1Dangerous ...AT.exe
windows11-21h2-x64
10Dangerous ...xx.txt
windows11-21h2-x64
3Dangerous ...01.jpg
windows11-21h2-x64
Dangerous ...02.jpg
windows11-21h2-x64
Dangerous ...04.jpg
windows11-21h2-x64
Dangerous ...nd.exe
windows11-21h2-x64
3Dangerous ...A1.jpg
windows11-21h2-x64
Dangerous ...ac.png
windows11-21h2-x64
Dangerous ...ct.png
windows11-21h2-x64
Dangerous ...ox.dll
windows11-21h2-x64
1Dangerous ...IP.dat
windows11-21h2-x64
3Dangerous ...og.rtf
windows11-21h2-x64
1Dangerous ...nd.exe
windows11-21h2-x64
3Dangerous ...ub.exe
windows11-21h2-x64
6Dangerous ...ub.exe
windows11-21h2-x64
3Dangerous ...ub.vbs
windows11-21h2-x64
1Dangerous ...EG.png
windows11-21h2-x64
Dangerous ...PH.png
windows11-21h2-x64
Dangerous ...VI.png
windows11-21h2-x64
Dangerous ...il.dll
windows11-21h2-x64
1Dangerous ...io.dll
windows11-21h2-x64
1Dangerous ...AN.exe
windows11-21h2-x64
1Dangerous ...df.exe
windows11-21h2-x64
3Dangerous ...nt.dll
windows11-21h2-x64
3Dangerous ...nx.dll
windows11-21h2-x64
3Dangerous ...li.dll
windows11-21h2-x64
3Dangerous ...Dc.dll
windows11-21h2-x64
1Dangerous ...nc.exe
windows11-21h2-x64
1Dangerous ...Ex.exe
windows11-21h2-x64
1Dangerous ...ub.xml
windows11-21h2-x64
3Dangerous ...ns.vnc
windows11-21h2-x64
3Analysis
-
max time kernel
434s -
max time network
438s -
platform
windows11-21h2_x64 -
resource
win11-20250217-en -
resource tags
arch:x64arch:x86image:win11-20250217-enlocale:en-usos:windows11-21h2-x64system -
submitted
25/02/2025, 14:57
Behavioral task
behavioral1
Sample
Dangerous RAT.zip
Resource
win11-20250217-en
Behavioral task
behavioral2
Sample
Dangerous RAT/Dangerous RAT.exe
Resource
win11-20250217-en
Behavioral task
behavioral3
Sample
Dangerous RAT/Exploit Creaked - FC/xxx.txt
Resource
win11-20250217-en
Behavioral task
behavioral4
Sample
Dangerous RAT/Extensions/01.jpg
Resource
win11-20250217-en
Behavioral task
behavioral5
Sample
Dangerous RAT/Extensions/02.jpg
Resource
win11-20250218-en
Behavioral task
behavioral6
Sample
Dangerous RAT/Extensions/04.jpg
Resource
win11-20250217-en
Behavioral task
behavioral7
Sample
Dangerous RAT/Extensions/Bind.exe
Resource
win11-20250217-en
Behavioral task
behavioral8
Sample
Dangerous RAT/Extensions/Img/A1.jpg
Resource
win11-20250218-en
Behavioral task
behavioral9
Sample
Dangerous RAT/Extensions/Img/Hac.png
Resource
win11-20250217-en
Behavioral task
behavioral10
Sample
Dangerous RAT/Extensions/Img/Vct.png
Resource
win11-20250217-en
Behavioral task
behavioral11
Sample
Dangerous RAT/FastColoredTextBox.dll
Resource
win11-20250217-en
Behavioral task
behavioral12
Sample
Dangerous RAT/GeoIP.dat
Resource
win11-20250217-en
Behavioral task
behavioral13
Sample
Dangerous RAT/Kalogar_Online/Dell-12-30-2020/Keylog.rtf
Resource
win11-20250217-en
Behavioral task
behavioral14
Sample
Dangerous RAT/Kay/Bind.exe
Resource
win11-20250217-en
Behavioral task
behavioral15
Sample
Dangerous RAT/Kay/Stub.exe
Resource
win11-20250217-en
Behavioral task
behavioral16
Sample
Dangerous RAT/Kay/Stub.exe
Resource
win11-20250217-en
Behavioral task
behavioral17
Sample
Dangerous RAT/Kay/Stub.vbs
Resource
win11-20250217-en
Behavioral task
behavioral18
Sample
Dangerous RAT/Map/EG.png
Resource
win11-20250217-en
Behavioral task
behavioral19
Sample
Dangerous RAT/Map/PH.png
Resource
win11-20250218-en
Behavioral task
behavioral20
Sample
Dangerous RAT/Map/VI.png
Resource
win11-20250217-en
Behavioral task
behavioral21
Sample
Dangerous RAT/Mono.Cecil.dll
Resource
win11-20250218-en
Behavioral task
behavioral22
Sample
Dangerous RAT/NAudio.dll
Resource
win11-20250217-en
Behavioral task
behavioral23
Sample
Dangerous RAT/Plugin/AN.exe
Resource
win11-20250217-en
Behavioral task
behavioral24
Sample
Dangerous RAT/Plugin/Adf.exe
Resource
win11-20250217-en
Behavioral task
behavioral25
Sample
Dangerous RAT/Plugin/Ant.dll
Resource
win11-20250217-en
Behavioral task
behavioral26
Sample
Dangerous RAT/Plugin/Anx.dll
Resource
win11-20250217-en
Behavioral task
behavioral27
Sample
Dangerous RAT/Plugin/Cli.dll
Resource
win11-20250217-en
Behavioral task
behavioral28
Sample
Dangerous RAT/Plugin/Dc.dll
Resource
win11-20250217-en
Behavioral task
behavioral29
Sample
Dangerous RAT/Plugin/Denc.exe
Resource
win11-20250217-en
Behavioral task
behavioral30
Sample
Dangerous RAT/Plugin/Ex.exe
Resource
win11-20250217-en
Behavioral task
behavioral31
Sample
Dangerous RAT/Stub.xml
Resource
win11-20250217-en
Behavioral task
behavioral32
Sample
Dangerous RAT/options.vnc
Resource
win11-20250217-en
General
-
Target
Dangerous RAT/Kay/Bind.exe
-
Size
33KB
-
MD5
98dca3c1bae7b12d90e05d56e23aab17
-
SHA1
4d0b3e9ef7f5e0d18bd8b97774963e89493c3494
-
SHA256
7b0d30222fd50ca8a4a5ea1af483e85ea7a332545b54344fc8fceb2e2fc2bfb9
-
SHA512
d8732a9c076f6f4d2fcce6c287705923b4f3983e0ce0381a419267c43f0b17d618e513f2981b7a033b0c546fe216671f4bb4ca1980dd7575da0ee8c7a3bbb8ca
-
SSDEEP
384:7L/Lu3GPLT8h16CnEkYuAu3tm9uuTMmv5Onuuuu/uuuuhuu7+sgPnEsU99uuEuu+:v63+SmnE55kQYd5c6s
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Bind.exe