General
- Target delta.198.91.2.1.exe
- Size 102.4MB
- Sample260707-p7rcdsft7j
- SHA256 5da33502700abebf7d3d666ba2e0cc9974f2d051bc7b0d4873e7fcb0c95e4389
- MD5 e3c0be45039464480f1d0291fae8f8dd
- SHA1 2ee0a642e897a32e5b0df8c9313aeb8bec7c9dd4
- SHA512 5eccfd39897bc5b468bba782784f53897c97d19feaf0424aa5d23b86d11e5d133833d6c481678d5ce00b1af78627c1fceec5769be5f910b153c8892b6388e020
- SSDEEP 1572864:QYqV5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5J:QYG
- TLSH T1803833EB64186C17D725CAFAD2BB19F8BF9AC09128758D045BEF6AD1FF025C00349B49
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
delta.198.91.2.1.exe
Resource
ubuntu2204-amd64-20260127-en
0 signatures
900 seconds
Malware Config
Extracted
Family
-
ratonrat
Version
-
Free
C2
-
portbuddy.dev:43268
Mutex
-
JWdxKzRBwBmLuLvnzLv43cQ
Attributes
-
assist
false
-
box
false
-
box_icon
No icon
-
box_msg
Hello, i'm the description of your raton client message box
-
box_title
Hello, im a title for your message box
-
defender
true
-
delay
0
-
hide_file
true
-
open_website
false
-
process_critical
true
-
raw
silly21
-
reconnect
3
-
startup
true
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/sillyisafed
Targets
-
- Target delta.198.91.2.1.exe
- Size 102.4MB
- SHA256 5da33502700abebf7d3d666ba2e0cc9974f2d051bc7b0d4873e7fcb0c95e4389
- MD5 e3c0be45039464480f1d0291fae8f8dd
- SHA1 2ee0a642e897a32e5b0df8c9313aeb8bec7c9dd4
- SHA512 5eccfd39897bc5b468bba782784f53897c97d19feaf0424aa5d23b86d11e5d133833d6c481678d5ce00b1af78627c1fceec5769be5f910b153c8892b6388e020
- SSDEEP 1572864:QYqV5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5V5J:QYG
- TLSH T1803833EB64186C17D725CAFAD2BB19F8BF9AC09128758D045BEF6AD1FF025C00349B49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10