Overview

overview

10

Static

static

3

19cee7817a...96.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    19cee7817ae22e2df83a3b8a970de839513dbb1a245177d95698d8ed39336796
  • Size 1.8MB
  • Sample260910-jrz2psgb38
  • SHA256 19cee7817ae22e2df83a3b8a970de839513dbb1a245177d95698d8ed39336796
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
modulerat

Malware Config

Targets

    • Target
      19cee7817ae22e2df83a3b8a970de839513dbb1a245177d95698d8ed39336796
    • Size 1.8MB
    • SHA256 19cee7817ae22e2df83a3b8a970de839513dbb1a245177d95698d8ed39336796
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    modulerat

    • PulsaRAT library module

      Core component of the PulsaRAT remote access trojan, implementing its command protocol for hidden remote desktop, UAC bypass, persistence, and credential theft.

      ratmodule

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks