Analysis
- max time kernel
149s - max time network
94s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
- submitted
24/06/2026, 17:51
General
- Target DeltaLoader.exe
- Size 3.5MB
- Sample260624-wfeb3sd141
- SHA256 8e817dcdc9b30f53bb9207d2e2200052d48e5233d3a0e3dcebc3ce88e194b5ce
Score
10/10
Malware Config
Extracted
Family
-
ratonrat
Version
-
v4.0.0
Mutex
-
silly1
Attributes
-
assist
silly11
-
box
silly8
-
box_icon
silly10
-
box_msg
silly9
-
box_title
silly17
-
defender
silly23
-
delay
silly5
-
hide_file
silly7
-
open_website
silly13
-
password
silly20
-
process_critical
silly6
-
raw
silly21
-
reconnect
silly22
-
startup
silly4
-
tag
silly16
-
uac
silly11
-
vm
silly15
-
website
silly14
Signatures
- Family: RatonRAT
RatonRAT is an information stealer written in C#.
- Detects RatonRAT payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DeltaLoader.exe"C:\Users\Admin\AppData\Local\Temp\DeltaLoader.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4348-0-0x00007FFE646CF000-0x00007FFE646D0000-memory.dmp
memory/4348-1-0x00000284F2DD0000-0x00000284F315C000-memory.dmp
memory/4348-2-0x00007FFE64540000-0x00007FFE64EE4000-memory.dmp
memory/4348-3-0x00000284F3640000-0x00000284F3648000-memory.dmp
memory/4348-4-0x00007FFE64540000-0x00007FFE64EE4000-memory.dmp
memory/4348-5-0x00007FFE64540000-0x00007FFE64EE4000-memory.dmp
memory/4348-6-0x00007FFE64540000-0x00007FFE64EE4000-memory.dmp