General
- Target loader.exe
- Size 2.4MB
- Sample260916-wr6kpsej6w
- SHA256 62f09def0ca66455eb493e07278e39a9e1fb57c42692ac196a22b68a01f2f0f8
- MD5 1c7a963351e640b7d7e2cab1aa4f7032
- SHA1 4b4c4b3991bfb2baee25f398741e4d275a63f864
- SHA512 49374f008cf0646e60ab6f43c7caee324fc51f8e467c09d5649abe907a6838e14e489a64de6f27f243d1daa96a9ba5a8487465c6e4e6d87fa443c43411bc5892
- SSDEEP 49152:TgVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4BAn4e:TgVUuHjkDGjYQDGuRxzew
- TLSH T1C8C5011833F9C718F1AF4BF4A47189664771FD179C62DBAC58A139AE04B6F44BA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
loader.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
ratonrat
Version
-
Free
C2
-
192.168.1.248:2137
Mutex
-
SMqn88dkPsG9L22VVJzp2SD
Attributes
-
assist
false
-
box
false
-
box_icon
No icon
-
box_msg
Hello, i'm the description of your raton client message box
-
box_title
Hello, im a title for your message box
-
defender
false
-
delay
0
-
hide_file
false
-
open_website
false
-
process_critical
false
-
raw
silly21
-
reconnect
3
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/sillyisafed
Targets
-
- Target loader.exe
- Size 2.4MB
- SHA256 62f09def0ca66455eb493e07278e39a9e1fb57c42692ac196a22b68a01f2f0f8
- MD5 1c7a963351e640b7d7e2cab1aa4f7032
- SHA1 4b4c4b3991bfb2baee25f398741e4d275a63f864
- SHA512 49374f008cf0646e60ab6f43c7caee324fc51f8e467c09d5649abe907a6838e14e489a64de6f27f243d1daa96a9ba5a8487465c6e4e6d87fa443c43411bc5892
- SSDEEP 49152:TgVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4BAn4e:TgVUuHjkDGjYQDGuRxzew
- TLSH T1C8C5011833F9C718F1AF4BF4A47189664771FD179C62DBAC58A139AE04B6F44BA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects RatonRAT payload