General

  • Target
    https://gofile.io/d/Ph53lB
  • Sample260629-3y76fabs7m

Malware Config

Extracted

Family
  • ratonrat

Version
  • v4.0.0

C2
  • portbuddy.dev:40644

Mutex
  • qMl58ePiPxhRRjbwwOJuXYv

Attributes
  • assist

    false

  • box

    true

  • box_icon

    Information

  • box_msg

    New version of larp exodus (1.1.1.5) is out.

  • box_title

    Old version of larp wallet

  • defender

    true

  • delay

    0

  • hide_file

    false

  • open_website

    true

  • process_critical

    true

  • raw

    silly21

  • reconnect

    3

  • startup

    true

  • tag

    Infected

  • uac

    false

  • vm

    false

  • website

    https://discord.gg/5Ta5nKpc

Targets

MITRE ATT&CK Enterprise v16

Tasks