General
- Target rat.exe
- Size 765KB
- Sample260625-tfftssc14z
- SHA256 d5ebf94392295c1c8d2eb0587e878bb19db581da2c1fd11d2bf9b814b0ca8113
- MD5 a837a02fe116c96d713a9a8b08b621fb
- SHA1 aecf1197fa6f4a7281b7f45d575d230c1a29b242
- SHA512 ac48f63413250a3b91172cf0b4d33ef5ce8f1cb72374d5f90a0d62843d9e6a274965edd3f619b1e9418a6761fe876e731c9555efc29893ab9315fc29883841b0
- SSDEEP 6144:pFxX+Nvzz+iig8Hig0RyiYASYCKMmjUBEceLUUajwv36idnHEy+4cPWoDfrxsjsf:hufigjlFg7954c9Lrxis6pKJaRtIX2g
- TLSH T182F43B2A5B8402BCE0B7D27ADE959E41F735780E03F1ADDF079084A65EA75A04F3A713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rat.exe
Resource
win10v2004-20260513-en
3 signatures
300 seconds
Malware Config
Targets
-
- Target rat.exe
- Size 765KB
- SHA256 d5ebf94392295c1c8d2eb0587e878bb19db581da2c1fd11d2bf9b814b0ca8113
- MD5 a837a02fe116c96d713a9a8b08b621fb
- SHA1 aecf1197fa6f4a7281b7f45d575d230c1a29b242
- SHA512 ac48f63413250a3b91172cf0b4d33ef5ce8f1cb72374d5f90a0d62843d9e6a274965edd3f619b1e9418a6761fe876e731c9555efc29893ab9315fc29883841b0
- SSDEEP 6144:pFxX+Nvzz+iig8Hig0RyiYASYCKMmjUBEceLUUajwv36idnHEy+4cPWoDfrxsjsf:hufigjlFg7954c9Lrxis6pKJaRtIX2g
- TLSH T182F43B2A5B8402BCE0B7D27ADE959E41F735780E03F1ADDF079084A65EA75A04F3A713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.