General
- Target rat.exe
- Size 21.7MB
- Sample260623-hft6msay5n
- SHA256 ec8c1c2f194c4c8a76ed3d8dc2da1ea7bc843581b34bd0da4c685acdf0c5f46c
- MD5 546ec8e977e012d3e5ef801d1fa72736
- SHA1 319e7206bbdd446abca490d333ad48fb4c81a977
- SHA512 2fec59119a6c02905ba17c5393b28519ef0b48a6d23b66f47a1eda1c9ff9ec42c029e6ac8790beb0e320e61e1f3507c56be8a68302c5a1818d0752cad66185f3
- SSDEEP 393216:31biodjs14bMgLc9zGdJhPdDEXEAphVt4IwQSg+yPm5uSorXh5ogodjPRvk7dwpd:k2G4TLcNODpERphMBo+vuScxygod5vka
- TLSH T1DA373358629176F9FCE7403E9862C220E27176502F44D1EF2BBD4A592C3BBC50D7D2BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
rat.exe
Resource
win10v2004-20260513-en
3 signatures
600 seconds
Behavioral task
behavioral2
Sample
rat.exe
Resource
win11ltsc2024-20260618-en
3 signatures
600 seconds
Malware Config
Targets
-
- Target rat.exe
- Size 21.7MB
- SHA256 ec8c1c2f194c4c8a76ed3d8dc2da1ea7bc843581b34bd0da4c685acdf0c5f46c
- MD5 546ec8e977e012d3e5ef801d1fa72736
- SHA1 319e7206bbdd446abca490d333ad48fb4c81a977
- SHA512 2fec59119a6c02905ba17c5393b28519ef0b48a6d23b66f47a1eda1c9ff9ec42c029e6ac8790beb0e320e61e1f3507c56be8a68302c5a1818d0752cad66185f3
- SSDEEP 393216:31biodjs14bMgLc9zGdJhPdDEXEAphVt4IwQSg+yPm5uSorXh5ogodjPRvk7dwpd:k2G4TLcNODpERphMBo+vuScxygod5vka
- TLSH T1DA373358629176F9FCE7403E9862C220E27176502F44D1EF2BBD4A592C3BBC50D7D2BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.