General
- Target rat_client2.exe
- Size 114KB
- Sample260912-yn71gawsgw
- SHA256 727362e1e23765b03e6bee975a8aefd3692b1f9733b0c5c1504e9eac86b12d82
- MD5 5a2e63d2cc1fe230951eacd5b2007c37
- SHA1 cb67111cf6e82809256666fe7d31e682020987fb
- SHA512 e48a87cd47e2d8665ee78e57259a2818e22e159b0a565958a32f05c0a86d668b115e64af3a7cf1efe47d25afb230f6e6dabf4fb0297b364c0e94ac71dd7f8e28
- SSDEEP 1536:7m49g/90m58bF6Gf8HI38L4qt71F0vdnIg+VYVzhsIe40PDs7axmf:2DGFjR64ql1+nIpVYVzhG4Qia2
- TLSH T1FBB33B1BFA5910BDE2A6D67DD9864C41DF72BC4A4791A7CF03904DE20E666D06F3E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rat_client2.exe
Resource
win11-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target rat_client2.exe
- Size 114KB
- SHA256 727362e1e23765b03e6bee975a8aefd3692b1f9733b0c5c1504e9eac86b12d82
- MD5 5a2e63d2cc1fe230951eacd5b2007c37
- SHA1 cb67111cf6e82809256666fe7d31e682020987fb
- SHA512 e48a87cd47e2d8665ee78e57259a2818e22e159b0a565958a32f05c0a86d668b115e64af3a7cf1efe47d25afb230f6e6dabf4fb0297b364c0e94ac71dd7f8e28
- SSDEEP 1536:7m49g/90m58bF6Gf8HI38L4qt71F0vdnIg+VYVzhsIe40PDs7axmf:2DGFjR64ql1+nIpVYVzhG4Qia2
- TLSH T1FBB33B1BFA5910BDE2A6D67DD9864C41DF72BC4A4791A7CF03904DE20E666D06F3E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Disables one or more Microsoft Defender components
Uses the Powershell Set-MpPreference cmdlet to disable one or more Microsoft Defender components.
-
Disables service(s)
-
Stops running service(s)