General
- Target 67rat.exe
- Size 3.5MB
- Sample260624-3acdvsgt5n
- SHA256 9f573e7d414fac6ae5808663f8c5675f1bb8f6056a979f30b241d274bc3401de
- MD5 6ff55a044636dc0dba51caeeb803874d
- SHA1 27e12cdbfd00414d27dbf9644f73527a593de619
- SHA512 67bb60a0a98c2dd640cabead078266bc8600707c900511a2cde1eeb297fde37444be14f9bf31d1f0f656f7e9862f701c01e8ec88f7aae36f497936ce80bc3a85
- SSDEEP 49152:emu4tq0WgVUlsHjkmiGWU5+5WeLGpMZ7iKPNgo9sv:jq0WgVUuHjkDGjYQeqpgmltv
- TLSH T11C06CF407BD4CE1BE19F87B6B4F2021057B5EC15A796E70B2E90BAAC1CB37445E1839B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
ratonrat
Version
-
v4.0.0
C2
-
k7ttnhbwuh.localto.net:7701
Mutex
-
v4SnPwTVpzBmsllkJbi7xuA
Attributes
-
assist
false
-
box
false
-
box_icon
Error
-
box_msg
I'm the message box description
-
box_title
Hello World
-
defender
false
-
delay
0
-
hide_file
false
-
open_website
false
-
process_critical
false
-
raw
silly21
-
reconnect
3
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/example
Targets
-
- Target 67rat.exe
- Size 3.5MB
- SHA256 9f573e7d414fac6ae5808663f8c5675f1bb8f6056a979f30b241d274bc3401de
- MD5 6ff55a044636dc0dba51caeeb803874d
- SHA1 27e12cdbfd00414d27dbf9644f73527a593de619
- SHA512 67bb60a0a98c2dd640cabead078266bc8600707c900511a2cde1eeb297fde37444be14f9bf31d1f0f656f7e9862f701c01e8ec88f7aae36f497936ce80bc3a85
- SSDEEP 49152:emu4tq0WgVUlsHjkmiGWU5+5WeLGpMZ7iKPNgo9sv:jq0WgVUuHjkDGjYQeqpgmltv
- TLSH T11C06CF407BD4CE1BE19F87B6B4F2021057B5EC15A796E70B2E90BAAC1CB37445E1839B
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects RatonRAT payload