General
- Target ratonClient.exe
- Size 2.4MB
- Sample260818-b8zhhatepg
- SHA256 49bd683592c1dfb74fcf2f9eb115f300bf8f8a85ac9060a13bdaeb39eabaf393
- MD5 3ceed7b8e9d7be5e709bda477cdea5f1
- SHA1 236568c8f8dc694802e799e1dd5ae8ea651b5dbd
- SHA512 05f3cb8f55bffc28e5a371583a05377d03e67cbd02258716908f4a70ef742b30f97725e774af9976733946a07909abe7fe15024e4cd122a899d1e718211838a4
- SSDEEP 49152:/magVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4CKP:/9gVUuHjkDGjYQDGuRxzew
- TLSH T17BC5016833F98A0CF1BF4BF4A4B149664B72FC079C96D76C18A579DD04B6F44AA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ratonClient.exe
Resource
win10v2004-20260513-de
2 signatures
900 seconds
Malware Config
Extracted
Family
-
ratonrat
Version
-
Professional
Mutex
-
uC8bhqiLzp0A8JKgRCxZsUj
Attributes
-
assist
true
-
box
true
-
box_icon
Error
-
box_msg
I'm the message box description
-
box_title
Hello World
-
defender
true
-
delay
0
-
hide_file
true
-
open_website
false
-
password
t.me/junk_code
-
process_critical
true
-
raw
silly21
-
reconnect
3
-
startup
true
-
tag
Infected
-
uac
true
-
vm
false
-
website
https://t.me/example
Targets
-
- Target ratonClient.exe
- Size 2.4MB
- SHA256 49bd683592c1dfb74fcf2f9eb115f300bf8f8a85ac9060a13bdaeb39eabaf393
- MD5 3ceed7b8e9d7be5e709bda477cdea5f1
- SHA1 236568c8f8dc694802e799e1dd5ae8ea651b5dbd
- SHA512 05f3cb8f55bffc28e5a371583a05377d03e67cbd02258716908f4a70ef742b30f97725e774af9976733946a07909abe7fe15024e4cd122a899d1e718211838a4
- SSDEEP 49152:/magVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4CKP:/9gVUuHjkDGjYQDGuRxzew
- TLSH T17BC5016833F98A0CF1BF4BF4A4B149664B72FC079C96D76C18A579DD04B6F44AA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects RatonRAT payload