Analysis
- user interaction
yes - max time kernel
149s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
14/08/2026, 02:11
General
- Target ratonClient.exe
- Size 2.4MB
- Sample260814-cmfzpsef79
- SHA256 be216fbfdeb39f15c01dda14cf93799d8c9c31525d53d86bae7e245d2844b1e5
Malware Config
Extracted
-
ratonrat
-
Free
-
109.77.201.67:8000
-
p3IamcwGrkDdAQ6Kpob3HFK
-
assist
false
-
box
false
-
box_icon
No icon
-
box_msg
Hello, i'm the description of your raton client message box
-
box_title
Hello, im a title for your message box
-
defender
false
-
delay
0
-
hide_file
false
-
open_website
false
-
process_critical
false
-
raw
silly21
-
reconnect
3
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/sillyisafed
Signatures
- Family: RatonRAT
RatonRAT is an information stealer written in C#.
- Detects RatonRAT payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ratonClient.exe"C:\Users\Admin\AppData\Local\Temp\ratonClient.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
stuff.dll
memory/5456-0-0x00007FF9C3B7F000-0x00007FF9C3B80000-memory.dmp
memory/5456-1-0x00000109FD2C0000-0x00000109FD52A000-memory.dmp
memory/5456-2-0x00007FF9C39F0000-0x00007FF9C4394000-memory.dmp
memory/5456-3-0x00007FF9C39F0000-0x00007FF9C4394000-memory.dmp
memory/5456-37-0x00007FF9C39F0000-0x00007FF9C4394000-memory.dmp
memory/5456-48-0x00000109FF4A0000-0x00000109FF4AA000-memory.dmp
memory/5456-54-0x00007FF9C39F0000-0x00007FF9C4394000-memory.dmp
memory/5456-55-0x00007FF9C39F0000-0x00007FF9C4394000-memory.dmp
memory/5456-56-0x00007FF9C39F0000-0x00007FF9C4394000-memory.dmp
memory/5456-57-0x00007FF9C39F0000-0x00007FF9C4394000-memory.dmp
memory/5456-58-0x00007FF9C39F0000-0x00007FF9C4394000-memory.dmp