General
- Target Rat-Builder.dll
- Size 108KB
- Sample260724-r9gl3sha84
- SHA256 49c02d54be2a4457f4fe8606c55761cf0ec9e37025e5096a6db5f7d51e237f88
- MD5 3ff41b347474ee3f35f0075a080c2335
- SHA1 49cefaa4def1f7d1b457a144611ccb21f1c7ac11
- SHA512 c688bf1f347e1727e066ddb2b9ed9296dfd4f19dadb7a6e7b2203f00631e78c3c9cfea251e0cdd835293867c1db12a716eb3beb90549d8c9d2736247a04a2866
- SSDEEP 3072:8QWqp/ptHPIIkkYxGnPNam8N3NC8/PIZavk04n:8d2HPcMnkNN1AZaC
- TLSH T1E6B30202FD9382D5D14244F6D3A38F006AAA75B10B4953FB29F8762F1DF4EC39172A96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Rat-Builder.dll
Resource
win10v2004-20260513-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
Rat-Builder.dll
Resource
win11ltsc2024-20260709-en
1 signatures
300 seconds
Malware Config
Targets
-
- Target Rat-Builder.dll
- Size 108KB
- SHA256 49c02d54be2a4457f4fe8606c55761cf0ec9e37025e5096a6db5f7d51e237f88
- MD5 3ff41b347474ee3f35f0075a080c2335
- SHA1 49cefaa4def1f7d1b457a144611ccb21f1c7ac11
- SHA512 c688bf1f347e1727e066ddb2b9ed9296dfd4f19dadb7a6e7b2203f00631e78c3c9cfea251e0cdd835293867c1db12a716eb3beb90549d8c9d2736247a04a2866
- SSDEEP 3072:8QWqp/ptHPIIkkYxGnPNam8N3NC8/PIZavk04n:8d2HPcMnkNN1AZaC
- TLSH T1E6B30202FD9382D5D14244F6D3A38F006AAA75B10B4953FB29F8762F1DF4EC39172A96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.