Overview

overview

10

Static

static

10

Client(2).exe

windows10-ltsc_2021-x64

10

Client(2).exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Client(2).exe
  • Size 87KB
  • Sample260802-kn8p4sfg72
  • SHA256 e9277c85ff7f3461e4fa2c44847fbdbfed96b790f3ac173aa6fca28e92ee4954
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
galaxyratdiscoveryrat

Malware Config

Extracted

Family

  • galaxyrat

Mutex

  • %Mtx%

Attributes
  • pastebin

    %pasteurl%

Targets

    • Target
      Client(2).exe
    • Size 87KB
    • SHA256 e9277c85ff7f3461e4fa2c44847fbdbfed96b790f3ac173aa6fca28e92ee4954
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoverygalaxyratrat

    • Detects GalaxyRAT

    • Family: GalaxyRAT

      GalaxyRAT is a Windows RAT written in C#.

      ratgalaxyrat

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks