Overview

overview

10

Static

static

5

AutoClicker.exe

windows11-21h2-x64

Resubmissions

05/06/2026, 14:29

260605-rtq6kshw7t10

05/06/2026, 14:15

260605-rky5tsaz8p10

05/06/2026, 14:07

260605-rez5yaay4p10

05/06/2026, 13:44

260605-q12p8ag14s10

05/06/2026, 13:04

260605-qazsyaf1715

05/06/2026, 12:37

260605-ptpxeafv7y10

Sharing

Copy URL Twitter E-mail

General

  • Target
    AutoClicker.exe
  • Size 1.1MB
  • Sample260605-rez5yaay4p
  • SHA256 1ce7da6f2813c2ad1d2e496be6714e08cd618e6d9fe2df26c2bd4d894c9a6ec1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
ratonratdefense_evasiondiscoveryexecutionpersistencestealer

Malware Config

Extracted

Family

  • ratonrat

Version

  • Free

C2

  • e97cmalzv5.localto.net:13677

Mutex

  • 05JsXI231Nb9brS1kcNYKqk

Attributes
  • assist

    false

  • box

    false

  • box_icon

    No icon

  • box_msg

    Hello, i'm the description of your raton client message box

  • box_title

    Hello, im a title for your message box

  • defender

    true

  • delay

    0

  • hide_file

    true

  • open_website

    false

  • process_critical

    true

  • raw

    silly21

  • reconnect

    3

  • startup

    true

  • tag

    Infected

  • uac

    false

  • vm

    false

  • website

    https://t.me/sillyisafed

Targets

    • Target
      AutoClicker.exe
    • Size 1.1MB
    • SHA256 1ce7da6f2813c2ad1d2e496be6714e08cd618e6d9fe2df26c2bd4d894c9a6ec1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasiondiscoveryexecutionratonratpersistencestealer

    • Detects RatonRAT payload

    • Family: RatonRAT

      RatonRAT is an information stealer written in C#.

      stealerratonrat

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks