General
- Target Main.exe
- Size 3.5MB
- Sample260418-dybd2afx7x
- SHA256 dcc2ad9ae0c2885beb9efce66ad04cb5d4573d55f2594fef1c5afc3ec64063e5
- MD5 d68dbdbf8deb24060799d050fadd470e
- SHA1 325e5b4f4c398598cd96cd7e4b5acaf222cc070e
- SHA512 c9d8dc75cbce43f34043a561bcc911c2feada44960645bd4c850f3af7ce8f1889eb4c08e192be66b936a19e35e1a4f86e7ddcf384088d81f6f976d05c101493f
- SSDEEP 49152:plm9N8DfgVUBsHjkmiGWU5+5WeLGpMZ7iKPyg0asWfTSwgW:tfgVUyHjkDGjYQeqpgm4NfTSu
- TLSH T15906CF017BE5DE1BE1AF57B2A4B247100771EC95A792EB0B1D9036EC1CB3740AD1A39B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Main.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Main.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Main.exe
- Size 3.5MB
- SHA256 dcc2ad9ae0c2885beb9efce66ad04cb5d4573d55f2594fef1c5afc3ec64063e5
- MD5 d68dbdbf8deb24060799d050fadd470e
- SHA1 325e5b4f4c398598cd96cd7e4b5acaf222cc070e
- SHA512 c9d8dc75cbce43f34043a561bcc911c2feada44960645bd4c850f3af7ce8f1889eb4c08e192be66b936a19e35e1a4f86e7ddcf384088d81f6f976d05c101493f
- SSDEEP 49152:plm9N8DfgVUBsHjkmiGWU5+5WeLGpMZ7iKPyg0asWfTSwgW:tfgVUyHjkDGjYQeqpgm4NfTSu
- TLSH T15906CF017BE5DE1BE1AF57B2A4B247100771EC95A792EB0B1D9036EC1CB3740AD1A39B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects RatonRAT payload
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.