General
- Target rat.exe
- Size 29.8MB
- Sample260809-b4ktjsgc56
- SHA256 50c0d0696d519b76b655d1a08ff0dcc15477d113d31c943d0dde3109cb3005f7
- MD5 8e70f2a452813301ee2ff664060ddc5a
- SHA1 8c80fb1a13342965bb01262e92212a70cc02452c
- SHA512 4d61496402d9b562d1c61c2983cbd3ed50c53bc4e0cc59b9345a7d7766e2ab6b5acfdffb1e60ef9df7a76d4b18302d56d59a79f1ec6844dddf10fee61dc77b1c
- SSDEEP 786432:e2G4TLcNOITwg1hKvuToWAGW8Ug1TaegzS+/p2/2:ZTIAIEg1k0oZ6THgzr/pa2
- TLSH T1CF67335A15E02AA7FED6D1369A939666D2B374203F21854F078C83E43FB72D40E7A371
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
rat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
rat.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target rat.exe
- Size 29.8MB
- SHA256 50c0d0696d519b76b655d1a08ff0dcc15477d113d31c943d0dde3109cb3005f7
- MD5 8e70f2a452813301ee2ff664060ddc5a
- SHA1 8c80fb1a13342965bb01262e92212a70cc02452c
- SHA512 4d61496402d9b562d1c61c2983cbd3ed50c53bc4e0cc59b9345a7d7766e2ab6b5acfdffb1e60ef9df7a76d4b18302d56d59a79f1ec6844dddf10fee61dc77b1c
- SSDEEP 786432:e2G4TLcNOITwg1hKvuToWAGW8Ug1TaegzS+/p2/2:ZTIAIEg1k0oZ6THgzr/pa2
- TLSH T1CF67335A15E02AA7FED6D1369A939666D2B374203F21854F078C83E43FB72D40E7A371
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.