Overview

overview

10

Static

static

10

2026-09-11...ch.exe

windows10-2004-x64

10

2026-09-11...ch.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-09-11_eae660a2233dc8d00173e011697a7f08_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat_snatch
  • Size 14.0MB
  • Sample260912-c8fwtsxcqa
  • SHA256 ed2f7ee1a3a175fbee9fa834a868826269c7f90301bdc16ab20a5a8c94029b4d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
webratratupx

Malware Config

Extracted

Family

  • webrat

Version

  • 2.0.0

C2

  • webratik.sbs:7777

  • https://webratik.sbs

  • https://arball.lat

  • https://webratik.eu.cc

  • https://webratiko.eu.cc

  • https://zapretdiscord.sbs

  • https://salat.webratik.sbs

  • https://c2.webratik.sbs

  • https://www.arball.lat

  • https://www.webratik.eu.cc

  • https://www.webratiko.eu.cc

  • https://panel.zapretdiscord.sbs

  • https://78.17.187.5:59077

  • https://89.208.32.130:42781

  • https://89.125.120.6:62965

  • https://104.143.218.6:61870

Mutex

  • WEBR_R4R45YT45NJI6JN

Targets

    • Target
      2026-09-11_eae660a2233dc8d00173e011697a7f08_coinminer_dosia_glassworm_hive_luca-stealer_poet-rat_quasar-rat_snatch
    • Size 14.0MB
    • SHA256 ed2f7ee1a3a175fbee9fa834a868826269c7f90301bdc16ab20a5a8c94029b4d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    webratratupx

    • Family: WebRAT

      WebRAT is a Windows RAT written in Golang.

      ratwebrat

    • Detects executables containing SQL queries to confidential data stores. Observed in infostealers

    • Detects executables referencing many IR and analysis tools

    • Detects executables referencing many confidential data stores found in browsers, mail clients, crypt

    • Detects executables referencing virtualization MAC addresses

    • UPX dump on OEP (original entry point)

    • detects Windows exceutables potentially bypassing UAC using fodhelper.exe

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks