General

  • Target
    Main.exe
  • Size 3.5MB
  • Sample260418-dybd2afx7x
  • SHA256 dcc2ad9ae0c2885beb9efce66ad04cb5d4573d55f2594fef1c5afc3ec64063e5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Main.exe
    • Size 3.5MB
    • SHA256 dcc2ad9ae0c2885beb9efce66ad04cb5d4573d55f2594fef1c5afc3ec64063e5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects RatonRAT payload

    • Family: RatonRAT

      RatonRAT is an information stealer written in C#.

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks