General
- Target discord nitro v.3.exe
- Size 2.8MB
- Sample260505-224rrags8s
- SHA256 ebfa991546216326f9e6cd9ce5c28f2c92011a4e95c42fe0b21728e0609029a8
- MD5 efa9c1beb896165aa10d578c3f8f1b70
- SHA1 5c975395f8df2dd33960613ae72e401e19e98de8
- SHA512 b0711d503547fdf10612d127924b97dbbddd32996c54d239cc03aca19c7583ad514a588f1bad58f19de4c8231e034643a1bbe9abf3ab2965836b965ecaa95e5d
- SSDEEP 49152:IgVUlsHjkmiGWU5FLGpMZ7iKPJ5W1tsclR0BxMzaRw4Tdb:IgVUuHjkDGjzqpgmwQ1GuRxzew
- TLSH T1BFD5021C33F6CA08F2AF4BB4E87185664372FE179C62D76C59A479AE04B6F44BA10713
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
discord nitro v.3.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
ratonrat
Version
-
Free
C2
-
portbuddy.dev:40695
Mutex
-
fE6EYcOyflGwIK4XngsXtKS
Attributes
-
assist
false
-
box
false
-
box_icon
No icon
-
box_msg
Hello, i'm the description of your raton client message box
-
box_title
Hello, im a title for your message box
-
defender
false
-
delay
0
-
hide_file
false
-
open_website
false
-
process_critical
false
-
raw
silly21
-
reconnect
3
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/sillyisafed
Targets
-
- Target discord nitro v.3.exe
- Size 2.8MB
- SHA256 ebfa991546216326f9e6cd9ce5c28f2c92011a4e95c42fe0b21728e0609029a8
- MD5 efa9c1beb896165aa10d578c3f8f1b70
- SHA1 5c975395f8df2dd33960613ae72e401e19e98de8
- SHA512 b0711d503547fdf10612d127924b97dbbddd32996c54d239cc03aca19c7583ad514a588f1bad58f19de4c8231e034643a1bbe9abf3ab2965836b965ecaa95e5d
- SSDEEP 49152:IgVUlsHjkmiGWU5FLGpMZ7iKPJ5W1tsclR0BxMzaRw4Tdb:IgVUuHjkDGjzqpgmwQ1GuRxzew
- TLSH T1BFD5021C33F6CA08F2AF4BB4E87185664372FE179C62D76C59A479AE04B6F44BA10713
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects RatonRAT payload