General
- Target ratonClient.exe
- Size 2.4MB
- Sample260814-cmfzpsef79
- SHA256 be216fbfdeb39f15c01dda14cf93799d8c9c31525d53d86bae7e245d2844b1e5
- MD5 5aca1d7fc92b29b7fa04a75ce2b42785
- SHA1 9b167e97548be252e37b0ac20195448fac7a8b12
- SHA512 d85455187141ccfc62c7bd558edbeee988cce35b86ff4128d75d254007c3cf26110eea973c2c72e746397a85970288f4c794dd76f3c2f43b869db565b0b5bca7
- SSDEEP 49152:TgVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4BAn4x:TgVUuHjkDGjYQDGuRxzew
- TLSH T111C5011833F9C718F1AF4BF4A57189664771FD179C62DBAC58A139AE00B6F44BA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ratonClient.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
ratonrat
Version
-
Free
C2
-
109.77.201.67:8000
Mutex
-
p3IamcwGrkDdAQ6Kpob3HFK
Attributes
-
assist
false
-
box
false
-
box_icon
No icon
-
box_msg
Hello, i'm the description of your raton client message box
-
box_title
Hello, im a title for your message box
-
defender
false
-
delay
0
-
hide_file
false
-
open_website
false
-
process_critical
false
-
raw
silly21
-
reconnect
3
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/sillyisafed
Targets
-
- Target ratonClient.exe
- Size 2.4MB
- SHA256 be216fbfdeb39f15c01dda14cf93799d8c9c31525d53d86bae7e245d2844b1e5
- MD5 5aca1d7fc92b29b7fa04a75ce2b42785
- SHA1 9b167e97548be252e37b0ac20195448fac7a8b12
- SHA512 d85455187141ccfc62c7bd558edbeee988cce35b86ff4128d75d254007c3cf26110eea973c2c72e746397a85970288f4c794dd76f3c2f43b869db565b0b5bca7
- SSDEEP 49152:TgVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4BAn4x:TgVUuHjkDGjYQDGuRxzew
- TLSH T111C5011833F9C718F1AF4BF4A57189664771FD179C62DBAC58A139AE00B6F44BA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects RatonRAT payload