General
- Target e5fdceea80b073df1297c4ceb5f13bb577e217be6c20fac8bc2be72e5e56c35d
- Size 2.4MB
- Sample260808-x8zn6atcmc
- SHA256 e5fdceea80b073df1297c4ceb5f13bb577e217be6c20fac8bc2be72e5e56c35d
- MD5 692b3766138847794cb1bfee8aeb9848
- SHA1 0a6c95be694374f3b9a3443f8e373e7ca4f68f37
- SHA512 01b0dec9a089b77d9a0fa0398004503f036cd4078ff30807d1e94bd302fa5c58da03e2f6f9a6e1d018701d962d68601e9f2b87c2653e52325bde35d1a31e1d52
- SSDEEP 49152:BgVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4BAn4/:BgVUuHjkDGjYQDGuRxzew
- TLSH T10AC5011C33F9C618F1AF4BF4A57189664771FD179C22DBAC58A139AE04B6F44BA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
e5fdceea80b073df1297c4ceb5f13bb577e217be6c20fac8bc2be72e5e56c35d.exe
Resource
win10v2004-20260513-en
2 signatures
60 seconds
Malware Config
Extracted
Family
-
ratonrat
Version
-
Free
C2
-
bjaz01cdkn.localto.net:6866
Mutex
-
7nvM2YG63ypzj6yvxDRRlAb
Attributes
-
assist
false
-
box
false
-
box_icon
No icon
-
box_msg
Hello, i'm the description of your raton client message box
-
box_title
Hello, im a title for your message box
-
defender
false
-
delay
0
-
hide_file
false
-
open_website
false
-
process_critical
false
-
reconnect
3
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/sillyisafed
Targets
-
- Target e5fdceea80b073df1297c4ceb5f13bb577e217be6c20fac8bc2be72e5e56c35d
- Size 2.4MB
- SHA256 e5fdceea80b073df1297c4ceb5f13bb577e217be6c20fac8bc2be72e5e56c35d
- MD5 692b3766138847794cb1bfee8aeb9848
- SHA1 0a6c95be694374f3b9a3443f8e373e7ca4f68f37
- SHA512 01b0dec9a089b77d9a0fa0398004503f036cd4078ff30807d1e94bd302fa5c58da03e2f6f9a6e1d018701d962d68601e9f2b87c2653e52325bde35d1a31e1d52
- SSDEEP 49152:BgVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4BAn4/:BgVUuHjkDGjYQDGuRxzew
- TLSH T10AC5011C33F9C618F1AF4BF4A57189664771FD179C22DBAC58A139AE04B6F44BA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects RatonRAT payload