General
- Target tester.exe
- Size 2.8MB
- Sample260812-g5ksts1ake
- SHA256 a3bfd4ad3cc7a0f60a2c0c2dcd82661a7d9d77e4b901bd87dc5da5d204cdf4ac
- MD5 94ccc435ded09eb0b26c3fc7821fc54f
- SHA1 8e001ce0915442767a6a9845b2ccb50bafb72c37
- SHA512 78cb0c3415bf1ffcaf4741295677482f7241dd75223bc5cfa72f153fb4d53c4a3841ad2777eca5902d2d3c333f162ba00ac9431b2108f16df6ff7934cd81f0ca
- SSDEEP 49152:CgVUlsHjkmiGWU5FLGpMZ7iKPJ5W1tsclR0BxMzaRw4h6Wk:CgVUuHjkDGjzqpgmwQ1GuRxzew
- TLSH T139D5121C33FACB18F2AF4BB4A87185664371FD579C62D76C58A139DE04B6F48AA10B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
tester.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
ratonrat
Version
-
Free
C2
-
1f77fa1e.vipport.online:8965
Mutex
-
qTOvyfDkLQxecsxalV6vwFv
Attributes
-
assist
false
-
box
false
-
box_icon
No icon
-
box_msg
Hello, i'm the description of your raton client message box
-
box_title
Hello, im a title for your message box
-
defender
false
-
delay
0
-
hide_file
false
-
open_website
false
-
process_critical
false
-
raw
https://pastebin.com/raw/bkNKQbrw
-
reconnect
3
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/sillyisafed
Targets
-
- Target tester.exe
- Size 2.8MB
- SHA256 a3bfd4ad3cc7a0f60a2c0c2dcd82661a7d9d77e4b901bd87dc5da5d204cdf4ac
- MD5 94ccc435ded09eb0b26c3fc7821fc54f
- SHA1 8e001ce0915442767a6a9845b2ccb50bafb72c37
- SHA512 78cb0c3415bf1ffcaf4741295677482f7241dd75223bc5cfa72f153fb4d53c4a3841ad2777eca5902d2d3c333f162ba00ac9431b2108f16df6ff7934cd81f0ca
- SSDEEP 49152:CgVUlsHjkmiGWU5FLGpMZ7iKPJ5W1tsclR0BxMzaRw4h6Wk:CgVUuHjkDGjzqpgmwQ1GuRxzew
- TLSH T139D5121C33FACB18F2AF4BB4A87185664371FD579C62D76C58A139DE04B6F48AA10B13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects RatonRAT payload