General
- Target rat.exe
- Size 771KB
- Sample260625-tv5fpsdw6j
- SHA256 aeddc33c76ba216fe02d52a95fb32b649338f38ef6427fb458d7cee8d63c27f4
- MD5 ed6b2a4560cc8831da885cf75d558c52
- SHA1 7c245ab7635035de07bfbaa55bc04cea4a560123
- SHA512 3a8542f79c80312cb0c6daeede9f2a8c2089fb7e53e0baf2229fb7a800a64f60e6b5625928eede344c2666a589927a4a6907aeaf516d1640b13dc6a6b79f676b
- SSDEEP 6144:DaykzjyNf43QzrQmd2GRtWmlOboxSh8q9/0XBkSvcDawfH0SRTIElDEmaWycWa6g:mocuIX6pjmagl6MkAx4zS5Xy70
- TLSH T1B8F43A2A5B9402BCF0B7D27ACE959D41EB35780E03F1AEDF079044A65EA71A44F3A713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rat.exe
Resource
win10v2004-20260513-en
2 signatures
600 seconds
Malware Config
Targets
-
- Target rat.exe
- Size 771KB
- SHA256 aeddc33c76ba216fe02d52a95fb32b649338f38ef6427fb458d7cee8d63c27f4
- MD5 ed6b2a4560cc8831da885cf75d558c52
- SHA1 7c245ab7635035de07bfbaa55bc04cea4a560123
- SHA512 3a8542f79c80312cb0c6daeede9f2a8c2089fb7e53e0baf2229fb7a800a64f60e6b5625928eede344c2666a589927a4a6907aeaf516d1640b13dc6a6b79f676b
- SSDEEP 6144:DaykzjyNf43QzrQmd2GRtWmlOboxSh8q9/0XBkSvcDawfH0SRTIElDEmaWycWa6g:mocuIX6pjmagl6MkAx4zS5Xy70
- TLSH T1B8F43A2A5B9402BCF0B7D27ACE959D41EB35780E03F1AEDF079044A65EA71A44F3A713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.