Overview

overview

10

Static

static

10

RatonButCooler.zip

windows10-ltsc_2021-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    RatonButCooler.zip
  • Size 28.2MB
  • Sample260717-ycql2scv2j
  • SHA256 9aeb2df45dc12be8a84804fc2061f9c4440b41caf61cf30bf48ac42acf45f7ec
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
ratonratcosturapackerstealer

Malware Config

Extracted

Family

  • ratonrat

Version

  • Free

Mutex

  • silly1

Attributes
  • assist

    silly11

  • box

    silly8

  • box_icon

    silly10

  • box_msg

    silly9

  • box_title

    silly17

  • defender

    silly23

  • delay

    silly5

  • hide_file

    silly7

  • open_website

    silly13

  • password

    silly20

  • process_critical

    silly6

  • raw

    silly21

  • reconnect

    silly22

  • startup

    silly4

  • tag

    silly16

  • uac

    silly11

  • vm

    silly15

  • website

    silly14

Targets

    • Target
      RatonButCooler.zip
    • Size 28.2MB
    • SHA256 9aeb2df45dc12be8a84804fc2061f9c4440b41caf61cf30bf48ac42acf45f7ec
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    ratonratstealer

    • Detects RatonRAT payload

    • Family: RatonRAT

      RatonRAT is an information stealer written in C#.

      stealerratonrat

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix

Tasks