General
- Target ratonClient.exe
- Size 2.4MB
- Sample260804-m7yelat1aw
- SHA256 69dfe82b4d42e43b0aba32ac0cfbd428e415b17f3c3602396b947a632895ef0a
- MD5 56c23a73ee485d0582b0cfa3633ddd47
- SHA1 9489018ff49d330e68e54f841b05e6f98c55b110
- SHA512 6f4a299c664d307c6f00cb1e126afcb103b28e5c7f2445c1ecfcb99ac9403540578193d756271bc99dc54b30757e16bab84da4944ac7f6f587117757918cb389
- SSDEEP 49152:IgVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4tAn4V:IgVUuHjkDGjYQDGuRxzew
- TLSH T123C5011833F9C718F1AF4BF4A57189664771FD179C22DBAC58E139AE04B6F44AA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ratonClient.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
ratonrat
Version
-
Free
C2
-
26.25.54.227:8080
Mutex
-
n0TgoTxFmgBU36gYEwWnOYP
Attributes
-
assist
false
-
box
false
-
box_icon
No icon
-
box_msg
Hello, i'm the description of your raton client message box
-
box_title
Hello, im a title for your message box
-
defender
false
-
delay
0
-
hide_file
false
-
open_website
false
-
process_critical
false
-
raw
silly21
-
reconnect
3
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/sillyisafed
Targets
-
- Target ratonClient.exe
- Size 2.4MB
- SHA256 69dfe82b4d42e43b0aba32ac0cfbd428e415b17f3c3602396b947a632895ef0a
- MD5 56c23a73ee485d0582b0cfa3633ddd47
- SHA1 9489018ff49d330e68e54f841b05e6f98c55b110
- SHA512 6f4a299c664d307c6f00cb1e126afcb103b28e5c7f2445c1ecfcb99ac9403540578193d756271bc99dc54b30757e16bab84da4944ac7f6f587117757918cb389
- SSDEEP 49152:IgVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4tAn4V:IgVUuHjkDGjYQDGuRxzew
- TLSH T123C5011833F9C718F1AF4BF4A57189664771FD179C22DBAC58E139AE04B6F44AA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects RatonRAT payload