Analysis
- max time kernel
149s - max time network
139s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
15/04/2026, 02:56
General
- Target ratonClient.exe
- Size 2.8MB
- Sample260415-dfct5shs81
- SHA256 3dc4e6bae0421dbc3bd7c526e0c42e79a396465b2ef9c2c2cac0d59cc1750054
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ratonClient.exe"C:\Users\Admin\AppData\Local\Temp\ratonClient.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
naudio.wasapi.dll
newtonsoft.json.dll
stuff.dll
system.buffers.dll
memory/4368-63-0x000001C835050000-0x000001C83506A000-memory.dmp
memory/4368-65-0x000001C834AE0000-0x000001C834B4B000-memory.dmp
memory/4368-54-0x000001C834F00000-0x000001C834F22000-memory.dmp
memory/4368-45-0x000001C834910000-0x000001C83491A000-memory.dmp
memory/4368-56-0x000001C834F30000-0x000001C834F3A000-memory.dmp
memory/4368-60-0x000001C835070000-0x000001C8350A2000-memory.dmp
memory/4368-0-0x000001C819F70000-0x000001C81A246000-memory.dmp
memory/4368-1-0x000001C834820000-0x000001C834830000-memory.dmp
memory/4368-64-0x000001C834AD0000-0x000001C834ADC000-memory.dmp
memory/4368-51-0x000001C834F70000-0x000001C835024000-memory.dmp
memory/4368-66-0x000001C834820000-0x000001C834830000-memory.dmp
memory/4368-74-0x000001C834AE0000-0x000001C834B4B000-memory.dmp
memory/4368-76-0x000001C834AE0000-0x000001C834B4B000-memory.dmp
memory/4368-78-0x000001C834AE0000-0x000001C834B4B000-memory.dmp
memory/4368-80-0x000001C834AE0000-0x000001C834B4B000-memory.dmp
memory/4368-84-0x000001C834AE0000-0x000001C834B4B000-memory.dmp
memory/4368-86-0x000001C834AE0000-0x000001C834B4B000-memory.dmp
memory/4368-88-0x000001C834AE0000-0x000001C834B4B000-memory.dmp
memory/4368-92-0x000001C834AE0000-0x000001C834B4B000-memory.dmp