castlerat | f2e36ccfeb225009ae229a2be905deff587c471b8d47690dc7f5111e1bc611af | Triage™

Login
Reports

Overview

overview

Static

static

3

f2e36ccfeb...af.exe

windows10-2004-x64

f2e36ccfeb...af.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
f2e36ccfeb225009ae229a2be905deff587c471b8d47690dc7f5111e1bc611af.bin
Size 12.4MB
Sample250918-qj9pha1nz4
SHA256 f2e36ccfeb225009ae229a2be905deff587c471b8d47690dc7f5111e1bc611af
MD5 8e57620fc89bac21cdee0b40219b8341
SHA1 c8c27eb034e01bc4b3d85571556dd178bc30ffa6
SHA512 9fe97b647ad7524cfe7e18156178f7a0f6bf07ce28d3a1e978d8f905e64d2b51078398034c6f7822e154f1955193f7899a1f7dd076c6034360f88257918bfb30
SSDEEP 98304:MRkyhrOHMsfh0V2Qcni6u4+PfyPz4ep/LEdQI:Mnhr/spCXciPf4zz
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

castlerat tag_150 apt persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f2e36ccfeb225009ae229a2be905deff587c471b8d47690dc7f5111e1bc611af.exe

Resource

win10v2004-20250619-en

windows10-2004-x64

7 signatures

150 seconds

tag_150 apt castlerat persistence trojan

Behavioral task

behavioral2

Sample

f2e36ccfeb225009ae229a2be905deff587c471b8d47690dc7f5111e1bc611af.exe

Resource

win11-20250610-en

windows11-21h2-x64

7 signatures

150 seconds

tag_150 apt castlerat persistence trojan

Malware Config

Extracted

Family

castlerat

C2

5.35.44.176
77.238.241.203

Targets

- Target
  f2e36ccfeb225009ae229a2be905deff587c471b8d47690dc7f5111e1bc611af.bin
- Size 12.4MB
- SHA256 f2e36ccfeb225009ae229a2be905deff587c471b8d47690dc7f5111e1bc611af
- MD5 8e57620fc89bac21cdee0b40219b8341
- SHA1 c8c27eb034e01bc4b3d85571556dd178bc30ffa6
- SHA512 9fe97b647ad7524cfe7e18156178f7a0f6bf07ce28d3a1e978d8f905e64d2b51078398034c6f7822e154f1955193f7899a1f7dd076c6034360f88257918bfb30
- SSDEEP 98304:MRkyhrOHMsfh0V2Qcni6u4+PfyPz4ep/LEdQI:Mnhr/spCXciPf4zz
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

tag_150 apt castlerat persistence trojan
- CastleRAT
  CastleRAT is a trojan available in both Python and C variants.
  trojan castlerat
- Castlerat family
  castlerat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tag_150aptcastleratpersistencetrojan

behavioral2

tag_150aptcastleratpersistencetrojan

© 2018-2026

Terms | Privacy