General
- Target ratonClient.exe
- Size 594KB
- Sample260806-bh72ysfa66
- SHA256 38f2b9f885ece9b8c2087f29390e88fbe7c621dfd6b2ea4e03caa42297b10744
- MD5 071afe27565140edea367d688f0d81e3
- SHA1 e3e5b59cdac2aff053a209c842faf342146aa186
- SHA512 18817406d654be1045318f23ffb9afcd13a285ebf90e034b78977c37b19b20bd39e22498ff4c68486ef02b7de693beb56d30fc57ddfb0790cfc109ef4f8a9f17
- SSDEEP 12288:K5ZR3374rIkzE7tnXknXQaBFJi4RkTAJ0MK86WoLb66OPfD9piI58x:8L4kkA7lXkXDDuAOFhWSApit
- TLSH T19CD40204B7BC3615E6FE8B3E59F050580FB6B2934A20E20C9D82D4AD1675F82D964FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ratonClient.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
ratonrat
Version
-
Professional
C2
-
72.31.21.20:55650
Mutex
-
d3qOmsSHnXMiRTaX0DdbFVF
Attributes
-
assist
false
-
box
false
-
box_icon
Error
-
box_msg
I'm the message box description
-
box_title
Hello World
-
defender
false
-
delay
0
-
hide_file
false
-
open_website
false
-
password
t.me/junk_code
-
process_critical
false
-
raw
silly21
-
reconnect
3
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/example
Targets
-
- Target ratonClient.exe
- Size 594KB
- SHA256 38f2b9f885ece9b8c2087f29390e88fbe7c621dfd6b2ea4e03caa42297b10744
- MD5 071afe27565140edea367d688f0d81e3
- SHA1 e3e5b59cdac2aff053a209c842faf342146aa186
- SHA512 18817406d654be1045318f23ffb9afcd13a285ebf90e034b78977c37b19b20bd39e22498ff4c68486ef02b7de693beb56d30fc57ddfb0790cfc109ef4f8a9f17
- SSDEEP 12288:K5ZR3374rIkzE7tnXknXQaBFJi4RkTAJ0MK86WoLb66OPfD9piI58x:8L4kkA7lXkXDDuAOFhWSApit
- TLSH T19CD40204B7BC3615E6FE8B3E59F050580FB6B2934A20E20C9D82D4AD1675F82D964FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects RatonRAT payload