Overview

overview

10

Static

static

5

888RAT 1.1...ed.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    888rat.zip
  • Size 38.0MB
  • Sample260426-eynj2aez8p
  • SHA256 4d7c8f5a06be88caff8630f55d7d4fee62be23a0c1690ba46963addfae4aa8ce
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
888ratdiscoveryinfostealerrattrojanupx

Malware Config

Targets

    • Target
      888RAT 1.1.1 cracked.exe
    • Size 38.4MB
    • SHA256 1b6148c640e0d63bfd74b9df003b3214dacf2aa678a7fce1075c25cf033e0e5c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discovery888ratinfostealerrattrojanupx

    • Android 888 RAT payload

    • Family: 888RAT

      888RAT is an Android remote administration tool.

      trojaninfostealerrat888rat

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks