General
- Target ratonClient1.exe
- Size 3.5MB
- Sample260709-1my3aaa19v
- SHA256 74f54e1d710d36307ae485d2f620ff05c33dc0d074d621067efc08e48015063c
- MD5 783e4229832c68df24b2ead2d32b8135
- SHA1 2a333e7d59b35aa3b3e0bd70b25eb7ede6d6ad2f
- SHA512 1d940828c1cd0b5a0d2415c76dc4621bedcd0f9e3c7cc8ce51e8a386a1a40d2b3f9721164775c4d4513e153ed2ed29d56f73f2bd8e1d28873e1840f3a53d9677
- SSDEEP 49152:Umu4tq0WgVUlsHjkmiGWU5+5WeLGpMZ7iKPNgo9sQ:Vq0WgVUuHjkDGjYQeqpgmltQ
- TLSH T17B06CF407BD4CE1BE19F87B6B4F2021057B5EC15A796E70B2E90BAAC1CB37445E1839B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ratonClient1.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
ratonrat
Version
-
v4.0.0
Mutex
-
AgbSvuhtNaMbfNq2PXbi0Oz
Attributes
-
assist
false
-
box
false
-
box_icon
Error
-
box_msg
I'm the message box description
-
box_title
Hello World
-
defender
false
-
delay
0
-
hide_file
false
-
open_website
false
-
process_critical
false
-
raw
silly21
-
reconnect
3
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/example
Targets
-
- Target ratonClient1.exe
- Size 3.5MB
- SHA256 74f54e1d710d36307ae485d2f620ff05c33dc0d074d621067efc08e48015063c
- MD5 783e4229832c68df24b2ead2d32b8135
- SHA1 2a333e7d59b35aa3b3e0bd70b25eb7ede6d6ad2f
- SHA512 1d940828c1cd0b5a0d2415c76dc4621bedcd0f9e3c7cc8ce51e8a386a1a40d2b3f9721164775c4d4513e153ed2ed29d56f73f2bd8e1d28873e1840f3a53d9677
- SSDEEP 49152:Umu4tq0WgVUlsHjkmiGWU5+5WeLGpMZ7iKPNgo9sQ:Vq0WgVUuHjkDGjYQeqpgmltQ
- TLSH T17B06CF407BD4CE1BE19F87B6B4F2021057B5EC15A796E70B2E90BAAC1CB37445E1839B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects RatonRAT payload