General
- Target rat.exe
- Size 106KB
- Sample260427-ppkrwsa19x
- SHA256 f8a24dc8710a80714ccffb721ff384c7468349abf2537c8354e5fd9ef2eb02c5
- MD5 f1c556db0c56c1c6f52193e129ae4f75
- SHA1 64cdb54f5d6015aef48c912e9fd481377ed46585
- SHA512 98a29a28a11f6c52ee36c6acc1020bc85bd9d645d47863534937df64623176ee7b19583af55ec17fc21b5084f1b2a7b66da50cd8b8c7aeef81703a1aaf572baf
- SSDEEP 1536:MDF4V0T12DXhFSsBG2zF4zuwb/fy+NqOLeWYA1BP2QajSs5pzyWQ0n6KSNVaU:IyhFSso2p26WYAnP2NpCm6KyVaU
- TLSH T156B318DB23EAAD93C2794A30BBB793C1A728DD542503E70B0484103D5E796AB3D467DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rat.exe
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target rat.exe
- Size 106KB
- SHA256 f8a24dc8710a80714ccffb721ff384c7468349abf2537c8354e5fd9ef2eb02c5
- MD5 f1c556db0c56c1c6f52193e129ae4f75
- SHA1 64cdb54f5d6015aef48c912e9fd481377ed46585
- SHA512 98a29a28a11f6c52ee36c6acc1020bc85bd9d645d47863534937df64623176ee7b19583af55ec17fc21b5084f1b2a7b66da50cd8b8c7aeef81703a1aaf572baf
- SSDEEP 1536:MDF4V0T12DXhFSsBG2zF4zuwb/fy+NqOLeWYA1BP2QajSs5pzyWQ0n6KSNVaU:IyhFSso2p26WYAnP2NpCm6KyVaU
- TLSH T156B318DB23EAAD93C2794A30BBB793C1A728DD542503E70B0484103D5E796AB3D467DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
Drops desktop.ini file(s)