General

  • Target
    DeltaLoader.exe
  • Size 3.5MB
  • Sample260624-wfeb3sd141
  • SHA256 8e817dcdc9b30f53bb9207d2e2200052d48e5233d3a0e3dcebc3ce88e194b5ce
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • ratonrat

Version
  • v4.0.0

Mutex
  • silly1

Attributes
  • assist

    silly11

  • box

    silly8

  • box_icon

    silly10

  • box_msg

    silly9

  • box_title

    silly17

  • defender

    silly23

  • delay

    silly5

  • hide_file

    silly7

  • open_website

    silly13

  • password

    silly20

  • process_critical

    silly6

  • raw

    silly21

  • reconnect

    silly22

  • startup

    silly4

  • tag

    silly16

  • uac

    silly11

  • vm

    silly15

  • website

    silly14

Targets

    • Target
      DeltaLoader.exe
    • Size 3.5MB
    • SHA256 8e817dcdc9b30f53bb9207d2e2200052d48e5233d3a0e3dcebc3ce88e194b5ce
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Detects RatonRAT payload

    • Family: RatonRAT

      RatonRAT is an information stealer written in C#.

MITRE ATT&CK Matrix

Tasks