General
- Target Spoofer.exe
- Size 3.5MB
- Sample260709-1h113sa17w
- SHA256 504cb159c6f69a46531bb2d120c954af246b28f08665efda0b9bafc558886e0a
- MD5 37570a7b4b3a0e8509a6680fa1617329
- SHA1 a74ed13fb5d5d485a92b2ee51def70f0897d7597
- SHA512 95a299eae3bb638baefed60bb6a213d88bb2b2b2849e897e24775f393e37a72fb1a5456b35d9d3761687599c94e7abc955167b29ba5f30d83a26c72cea52c2f6
- SSDEEP 49152:kmu4tq0WgVUlsHjkmiGWU5+5WeLGpMZ7iKPNgo9sL:lq0WgVUuHjkDGjYQeqpgmltL
- TLSH T1AF06CF417BD0CE1BE19F87B6B4F2021057B5EC15A796E70B2E90BAAC1CB37445E1839B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Spoofer.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
ratonrat
Version
-
v4.0.0
Mutex
-
JUd5PxQXe0lUeo6pB9MboAM
Attributes
-
assist
false
-
box
false
-
box_icon
Error
-
box_msg
I'm the message box description
-
box_title
Hello World
-
defender
false
-
delay
0
-
hide_file
false
-
open_website
false
-
process_critical
false
-
raw
silly21
-
reconnect
3
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/example
Targets
-
- Target Spoofer.exe
- Size 3.5MB
- SHA256 504cb159c6f69a46531bb2d120c954af246b28f08665efda0b9bafc558886e0a
- MD5 37570a7b4b3a0e8509a6680fa1617329
- SHA1 a74ed13fb5d5d485a92b2ee51def70f0897d7597
- SHA512 95a299eae3bb638baefed60bb6a213d88bb2b2b2849e897e24775f393e37a72fb1a5456b35d9d3761687599c94e7abc955167b29ba5f30d83a26c72cea52c2f6
- SSDEEP 49152:kmu4tq0WgVUlsHjkmiGWU5+5WeLGpMZ7iKPNgo9sL:lq0WgVUuHjkDGjYQeqpgmltL
- TLSH T1AF06CF417BD0CE1BE19F87B6B4F2021057B5EC15A796E70B2E90BAAC1CB37445E1839B
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects RatonRAT payload