General
- Target ratonClient.exe
- Size 2.4MB
- Sample260830-1rymba1bma
- SHA256 5779f502e990ec5b3438ac35a750f048632f006cc2aa39031a534ccb9116aaff
- MD5 e2e82a1ff3c4ac2d2a084bb81e8a4850
- SHA1 74fab500b58ef2b3b3754db8175ac3f9059eb780
- SHA512 48d4d8b13383888cef82384eda63a970377e0e7b3b17a9b0d80b3d4b2907ea4a3344712b5f15417d82c61e18b31aaa373c250294f121209ccb100245b2474b1c
- SSDEEP 49152:egVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4BAn40:egVUuHjkDGjYQDGuRxzew
- TLSH T182C5011C33F9C618F1AF4BF4A57189664771FD179C22DBAC58A139AE04B6F44BA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
ratonrat
Version
-
Free
C2
-
86.100.111.248:3373
Mutex
-
qmIt7uC2tRs2MrqknMVBmzc
Attributes
-
assist
false
-
box
false
-
box_icon
No icon
-
box_msg
Hello, i'm the description of your raton client message box
-
box_title
Hello, im a title for your message box
-
defender
false
-
delay
0
-
hide_file
false
-
open_website
false
-
process_critical
false
-
raw
silly21
-
reconnect
3
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/sillyisafed
Targets
-
- Target ratonClient.exe
- Size 2.4MB
- SHA256 5779f502e990ec5b3438ac35a750f048632f006cc2aa39031a534ccb9116aaff
- MD5 e2e82a1ff3c4ac2d2a084bb81e8a4850
- SHA1 74fab500b58ef2b3b3754db8175ac3f9059eb780
- SHA512 48d4d8b13383888cef82384eda63a970377e0e7b3b17a9b0d80b3d4b2907ea4a3344712b5f15417d82c61e18b31aaa373c250294f121209ccb100245b2474b1c
- SSDEEP 49152:egVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4BAn40:egVUuHjkDGjYQDGuRxzew
- TLSH T182C5011C33F9C618F1AF4BF4A57189664771FD179C22DBAC58A139AE04B6F44BA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects RatonRAT payload