General
- Target ratv3.exe
- Size 122KB
- Sample260703-2vr5dagz41
- SHA256 7e64f82150e6b142cff627d4e5743939cf8755e839b4c3ba17ddece51f6ce569
- MD5 458a63ff82f58201515cb2f8d8a5b541
- SHA1 ee30cc9799583f7eb5a3fd440ad4868e85844568
- SHA512 0dc9592c73e834932c6c4dc352ac3ec949462aed36b6ce40160a4857e716fda371cfd7b9125c00c6b198bd0a7fb91594cf283e82a5d29d8bb47b609a82b934e4
- SSDEEP 3072:c/25jvDSgsqsb5Uh28vAbTV1WW69B9VjMdxPedN9ug0z9TBfFSvG:/tzsb5Uh28+V1WW69B9VjMdxPedN9ugW
- TLSH T124C3275BB2E01189EBB581F6D5520786EB7074721711A3DB1B7863B71B2B8C58F3D3A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ratv3.exe
Resource
win10ltsc2021-20260513-en
12 signatures
900 seconds
Malware Config
Targets
-
- Target ratv3.exe
- Size 122KB
- SHA256 7e64f82150e6b142cff627d4e5743939cf8755e839b4c3ba17ddece51f6ce569
- MD5 458a63ff82f58201515cb2f8d8a5b541
- SHA1 ee30cc9799583f7eb5a3fd440ad4868e85844568
- SHA512 0dc9592c73e834932c6c4dc352ac3ec949462aed36b6ce40160a4857e716fda371cfd7b9125c00c6b198bd0a7fb91594cf283e82a5d29d8bb47b609a82b934e4
- SSDEEP 3072:c/25jvDSgsqsb5Uh28vAbTV1WW69B9VjMdxPedN9ug0z9TBfFSvG:/tzsb5Uh28+V1WW69B9VjMdxPedN9ugW
- TLSH T124C3275BB2E01189EBB581F6D5520786EB7074721711A3DB1B7863B71B2B8C58F3D3A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.