General
- Target 888 Rat v1.2.6.exe
- Size 75.0MB
- Sample251016-qrt9sabk41
- SHA256 5a14099abd6fe4b396094db7f9911251b25cd57893e14f97a7e7c5f44337bc98
- MD5 ad33064a9ca95c5b3ed45c14b7fe2739
- SHA1 0bd1286fa5fd936a31a4514798daffa444ce8e12
- SHA512 acb056e217edef4639179b24193a454f7e5aade51c1cc972e0458fc23c0ad982323161ad37050a4d849641dbf84719707efdcf4c99ecdf413381e5a752413647
- SSDEEP 1572864:5mhnD+9mK/LnkHD1LYrXatfLllR3RboTmxXlIgU/cNruKPZiv:6nD+UozkJLYrXajR4ElIgU/c5Qv
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
888 Rat v1.2.6.exe
Resource
win10v2004-20250502-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 888 Rat v1.2.6.exe
- Size 75.0MB
- SHA256 5a14099abd6fe4b396094db7f9911251b25cd57893e14f97a7e7c5f44337bc98
- MD5 ad33064a9ca95c5b3ed45c14b7fe2739
- SHA1 0bd1286fa5fd936a31a4514798daffa444ce8e12
- SHA512 acb056e217edef4639179b24193a454f7e5aade51c1cc972e0458fc23c0ad982323161ad37050a4d849641dbf84719707efdcf4c99ecdf413381e5a752413647
- SSDEEP 1572864:5mhnD+9mK/LnkHD1LYrXatfLllR3RboTmxXlIgU/cNruKPZiv:6nD+UozkJLYrXajR4ElIgU/c5Qv
- MD5 SHA1 SHA512 SSDEEP
-
888Rat family
-
Android 888 RAT payload
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
AutoIT Executable
AutoIT scripts compiled to PE executables.