sloppyrat | 60949961bef062ec8fc2b811c3b64a045865b7161d10489fa73889d2e8654899 | Triage™

Login
Reports

Overview

overview

Static

static

CrossDevic...ds.dll

windows10-2004-x64

1

CrossDevic...ds.dll

windows11-ltsc_2024-x64

1

CrossDevic...ce.dll

windows10-2004-x64

1

CrossDevic...ce.dll

windows11-ltsc_2024-x64

1

CrossDevic...ce.exe

windows10-2004-x64

CrossDevic...ce.exe

windows11-ltsc_2024-x64

CrossDevic...st.exe

windows10-2004-x64

1

CrossDevic...st.exe

windows11-ltsc_2024-x64

1

hostfxr.dll

windows10-2004-x64

1

hostfxr.dll

windows11-ltsc_2024-x64

1

python3.dll

windows10-2004-x64

1

python3.dll

windows11-ltsc_2024-x64

1

python312.dll

windows10-2004-x64

1

python312.dll

windows11-ltsc_2024-x64

1

__future__.pyc

windows10-2004-x64

3

__future__.pyc

windows11-ltsc_2024-x64

3

__hello__.pyc

windows10-2004-x64

3

__hello__.pyc

windows11-ltsc_2024-x64

3

__phello__...__.pyc

windows10-2004-x64

3

__phello__...__.pyc

windows11-ltsc_2024-x64

3

__phello__...__.pyc

windows10-2004-x64

3

__phello__...__.pyc

windows11-ltsc_2024-x64

3

__phello__...gs.pyc

windows10-2004-x64

3

__phello__...gs.pyc

windows11-ltsc_2024-x64

3

__phello__/spam.pyc

windows10-2004-x64

3

__phello__/spam.pyc

windows11-ltsc_2024-x64

3

_aix_support.pyc

windows10-2004-x64

3

_aix_support.pyc

windows11-ltsc_2024-x64

3

_collections_abc.pyc

windows10-2004-x64

3

_collections_abc.pyc

windows11-ltsc_2024-x64

3

_compat_pickle.pyc

windows10-2004-x64

3

_compat_pickle.pyc

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
cds.tar.gz
Size 7.5MB
Sample260930-g5785athka
SHA256 60949961bef062ec8fc2b811c3b64a045865b7161d10489fa73889d2e8654899
MD5 df1a7fa802dfce046d909639984dc5a2
SHA1 2bebc80ad110557f7345536c8b69db06f9f009d4
SHA512 914778cbef7b6351ee9c075479fbeaea5bbbb5570106497c751a4ceab080f1a137e7c084bb7ddb154aba9a0d83c6b6238c48331a326874f5a998cb838591e9d7
SSDEEP 196608:BBB7xxIpMeZur5GAf+lWGClM4b74ohEEaD/c:9w1ZKjGClM47yc
TLSH
T10C8633DC6CFCEA0AB162DF3F2FBE37956350E4145276492DED62AE8150DD0686DB2C80
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

sloppyrat discovery execution rat

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

CrossDevice.Clipboards.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

CrossDevice.Clipboards.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

CrossDeviceService.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

CrossDeviceService.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

CrossDeviceService.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

discovery sloppyrat rat

Behavioral task

behavioral6

Sample

CrossDeviceService.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

discovery sloppyrat rat

Behavioral task

behavioral7

Sample

CrossDeviceSettingsHost.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

CrossDeviceSettingsHost.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

hostfxr.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

hostfxr.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

python3.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

python3.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

python312.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

python312.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

__future__.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

__future__.pyc

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

__hello__.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

__hello__.pyc

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

__phello__/__init__.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

__phello__/__init__.pyc

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

__phello__/ham/__init__.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

__phello__/ham/__init__.pyc

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

__phello__/ham/eggs.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

__phello__/ham/eggs.pyc

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

__phello__/spam.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

__phello__/spam.pyc

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

_aix_support.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

_aix_support.pyc

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

_collections_abc.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

_collections_abc.pyc

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

_compat_pickle.pyc

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

_compat_pickle.pyc

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  CrossDevice.Clipboards.dll
- Size 55KB
- SHA256 7ce4c2e8b0b5809caabe1672a516b1c87a4605f4faf482258c1f7b1627067c8b
- MD5 fc5e3bd69e10f388a6320615570b7132
- SHA1 4293f6410ff908756ce5ef0bbfdfda9195376f94
- SHA512 4be6324db02ca0c6181401947f1d7b1f908005a6f17f30ebd026a08527cc2e2edcc2e754aadf5559fc815f5ccd75f1779acd4532d6ff6a1401b99c7341f469fe
- SSDEEP 768:9NuDuTiQ0/wk23UvYpr05Jk7vgZApZ7Q3nYHYAXK6tFXQKajB:WDlhI3UvtJkPpSIH/FtQ
- TLSH
  T11A43DCDC765072DFC86BC972CEA81C64EA60787B831BD203A45316AD9A0D99BCF151F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  CrossDeviceService.dll
- Size 262KB
- SHA256 5e55e3c8022793b14e503eba920f46dbef9a9efe06962c51bc4c9c224d2c4a6f
- MD5 091e980fe2cb67215e288e71849e8e94
- SHA1 ed196a91501e9528d57ce7c53aea1059b9eff819
- SHA512 4e1d5bdf1cff7b985bb8e9b7f7c60107963e645a7eb475b0afef68fe5dfe7f6dbcde6d0a49fafd88ca4dd8091b75f93edffa8995d99b46eab87dadd94b9a9522
- SSDEEP 6144:vPkkc0Vkkim89YNtem2WWAXmzyq5SBxZFG5:UkTVVBNTqEBxZi
- TLSH
  T1DC448D457BCC6F01EF6EA27C8053C203F73296525B11DAEB025898844E97FD9B3363A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  CrossDeviceService.exe
- Size 227KB
- SHA256 50203c8665fb5451fee12be0d52d7497120f82623eac26a62563073d7f903066
- MD5 f5c9e2e66c11fa5f8716cd2acfd63faf
- SHA1 fd540f96df689c620d343dfec74e035dcc53cfb8
- SHA512 f3d559d0ee4ae73f23e4c84fd9a806dc2dc61b25b932e80669745b4d339403cbe88c2d3599200f72455872af43e0b30142f0d349a066c7fd620fd790e06b8671
- SSDEEP 3072:hXwANETcQt1Onb5RHrfqDQXFn4dePYseJwmI82jT6yb9ZPJWTQcoCs8gp:5lxnlRLfyQXN4XDM/TPkkcg
- TLSH
  T162347E17A6AC10BEE1B7D678C9928941FB7278594B71A3CF07504DBA0F76BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery sloppyrat rat
- Family: SloppyRat
  SloppyRat is a Windows RAT written in C++.
  rat sloppyrat
behavioral5 behavioral6
- Target
  CrossDeviceSettingsHost.exe
- Size 227KB
- SHA256 a59e626131a56d7cdfe14b2412974c29acffba0de0fbed58a107736bb8d586e5
- MD5 89dbc56362eaf68480d877f37d8d039d
- SHA1 c127e3c916f45c19263670a540555a9abcbe5f15
- SHA512 50d6aacbfb0a29437d5874c1ab21c2c944e8026ebec4ff8d5ed377a763ba3d50736de65a332c7a3975741c07b2dbdbd54acb7384dcc832770063d55b45e792f8
- SSDEEP 3072:fXwANETcQt1Onb5RHrfqDQXFn4dePYseJwmI82jT6gbYZPJWTQcopozgj:/lxnlRLfyQXN4XDMJ8Pkkczi
- TLSH
  T11A347E17A6A810FFE1B7D678C9928941FB7278594B71A2CF07504DBA0F76BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  hostfxr.dll
- Size 1.6MB
- SHA256 cb313835fab15db0dde6556156d17f277d1a7520d85e23e510af71532a1c52bb
- MD5 b2d2b0ddfb26c7fc23d58c97d73b7080
- SHA1 3816ffaa4d2a68d3041ee8372d6af27a45ea043a
- SHA512 b1ee29a0edbf411497be06a0971a19c9b03b6e8804c66eab59dac077d1b9e187078edf841081e744360cad31aa7583f7bcd84f4ec5e4f69e3b6f56f266bb24a2
- SSDEEP 24576:NUKZ5b/uWKjQ/4/siNxDiQrmmMjrFok53lK/xt:NFTzYU/4NrV6W+Ux
- TLSH
  T126759E03E21B44B8C116C534C1A7A631A9B0BD9E46347D6F1B91EB331E62B90DE7B739
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  python3.dll
- Size 68KB
- SHA256 e6811bc64d0cc2a8525098b691db364679602c7456894c2f69e1837214a8a705
- MD5 3887abd76341942acef5eaf8999fd3d1
- SHA1 cdcbff88d88d542887669065ad0371fc16d9675e
- SHA512 83c0e83f5a6455c3cefeff9102027e55465f4507446391c8fe22910ed97627459dcdedf080dc1a74442fe3eb7aafcd51b3fc02a355cb7577bffeb0c87f61e463
- SSDEEP 1536:DDmF61JFn+/OtJIBL0O7yo47Q9CfIgHNS:DqU17JIBL0OjYk
- TLSH
  T109636142BB54F893DBFA66FC79D199CE642B12CC872588ECA47593D30D1A310A2E734D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  python312.dll
- Size 6.6MB
- SHA256 b6227a506a9963e7c8182785a54e14a193af51f7b277a61dda04492b499f49ad
- MD5 b0939b2f7ec83154e09eabf606179525
- SHA1 1ac5d572ef064de65d9ce1330425a67ad9be9b7c
- SHA512 20c20665d047a82d30934d8f39854bf953b864566d1dc54f5ad6132e6d621bc1d0c3f9b31ba3b17b7270b9a5f5b2924eec055d1fc2a0ac27c248bc7b35c8cd3d
- SSDEEP 98304:WuYbN/2UfE8f2XC06dfzCuvRHqMiELXzhnMg:W7b0+Zf2SHdZiM1N
- TLSH
  T1BF667C5A7358C0A9C96B90B4CC13C68EE7B27C517F50830B70ABB71E2F73792969A345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  __future__.pyc
- Size 2KB
- SHA256 c29f5419c65a8c98e43a9cde6756c882773ba93e4b4911873331229ace32c52f
- MD5 697fd592780eb69f726b7c7ea12ba0f1
- SHA1 4030af29c415b7e0578b9ea1bc8fe41a038fc103
- SHA512 8a290719cfcdc744232920d1a1688ce496f007a8904427fea4f5ead7e9e1205eea2819efb6bc0a2690477d5a09c4497b1d9251283153c83c52314ab91c567fe1
- TLSH
  T12651A91B60C0C41AFDE9F3F2D34D4B861BDDC94667375B2B0E1191021D876D0EE1A98D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  __hello__.pyc
- Size 806B
- SHA256 22d27e76c18ddcddeb091d80145776bcb94a9bf726efa9fa24acf89c51c14f1d
- MD5 d00f0664d52e68cd3352e3b45e581c3b
- SHA1 0c239feac9618df24a9e2f719148c0a993d5d1ab
- SHA512 8acd7f1e5d53d1c4a910d6154b910d55cb00ab1ae6fac1cb426955aec9d241a7d5b0af6fafb8bbf674f1192717210e66fd552b7699e1ee754683d1477be5c199
- TLSH
  T1FC019E86FA9145FBFADCF7B9A4A5450D0B77852DC1818303161E50B22D8EA817D8070C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  __phello__/__init__.pyc
- Size 349B
- SHA256 d24f6d4d133a894983b9c5349084741af709994cf49343c62fb762c79e6b8ec9
- MD5 76d1d673a17cd54e8b4558fdb54d9d1a
- SHA1 c69f20409cb3e714713d96b0cb423982cccccfaf
- SHA512 7ba06e1eeba1916e5d5b8a2903a6a59825ac06beaba91ef82c22e92f15ab96262974a999a2d7da37c2f9c777d71d8a2a6b486b1cdd35c9697db00c7802c5e48b
- TLSH
  T1C8E07D07B9A3999FC03CA23CB820615E0995DE22E2114203800D32D6AD096D90D91805
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  __phello__/ham/__init__.pyc
- Size 123B
- SHA256 96fd489b401993e59aac348be864e411b107cfb60a851e9e4b15ebb7fbf586be
- MD5 6d3e889e9483395152bd3f096a5cb036
- SHA1 bbbf5bebcdbe64fdbf69d3f4593bdefd9fc0e928
- SHA512 db0482ade1e665d9492636cd7f194b375fa17f538d4f5757aaf5d4d79c95f11c379a7ba9d363892a21441be8cd8856bcdd90fabe0c590d13228f19360c2209c4
- TLSH
  T10AB01200A823C5CFD07C79BC95FA531C02D6AAC2D1568003461990D86C2C7300CE081C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  __phello__/ham/eggs.pyc
- Size 119B
- SHA256 42125b7a1ce1a6cf0806cf3d32aaa4b0b6c9d6b9064410db0b75e15108094b76
- MD5 44f690d6b719e97c39ec234e9d9f2258
- SHA1 27466bd74d25f29f7ac0dd3bab666886970ce10b
- SHA512 5591637b0d67fc01d37870b9caf21f079599f7a42d6b5983c0d789fc5ce45253536b4f81c119c6998abd1efee9610f6e0010698251f0a853e588cb59d044013d
- TLSH
  T168B01250AD12C5CEC03D76BC85F2521C16D276C2D15280430619F0945C2C7300CF0814
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  __phello__/spam.pyc
- Size 345B
- SHA256 2fa47f149325851451b981f7dc406a99168368738bd61b3084627f52e34d1dd5
- MD5 2ef12d456e039e30d16190b4b774002e
- SHA1 94f112f1c61edd004d58fc5e0442a59cd29d53ad
- SHA512 caaf4621a77a2c604f3022388cf2189b1f1563d80b4eccf5842e31290ee9fffa508659b2569b7773dcb06aff9d8dc1f5da60c743588e207365eb9b17184de3fc
- TLSH
  T100E07206BAA258ABC03CA23CFC20A15E0AA1DE62E3224203800A32E6AD496D90DA1845
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  _aix_support.pyc
- Size 3KB
- SHA256 9cab70c6cdc41e4cc25c5660bff30a715752aed882c71d367c064fa60cc79d91
- MD5 0e9083c085bffb8ea73617d3203e998a
- SHA1 98c8a8513078f4b7b5b89d1b23ac2653b46dfefe
- SHA512 99f8c35381b620438467f0ae4eab2d10e74565f6c855462c9815c676e8068ca5130abccebf78e49f4e28e77f784210f682f12c914d03005d59db38880dd3c9e2
- TLSH
  T1436184867F82E93BFD21A4B02858494FF32104F5FA48EB175582812A4EAB971EC61DDD
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  _collections_abc.pyc
- Size 38KB
- SHA256 ed607b0d90bcdb212ba385ba5b931e7cf4c05e2e38a01a03c6dc7e819c6447ce
- MD5 19f6d1a279c742ac31b05d71cc7801ab
- SHA1 96d6553ae3508a0225c0858349721a5e62678edc
- SHA512 668642fbb692db863c7636f98d08d6fa2f2ea88b009d5f3188dd5e7045584d8506564d6cd7101f5387c1b7b9261d298eb6d89bf2e1f2e19c4985cc7831bfb17f
- SSDEEP 384:31xlfKAqxnd++E7ipcQgU1qRJah8x56VsKlJroUBkkePGjeg:31xlfKAqxndI7i6FRJq8x5YNoaePGjj
- TLSH
  T1DD038388B1E2E877FC94F2F95426491DB72788B6F300C763191B10AAAC1B5D1CD76DAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  _compat_pickle.pyc
- Size 6KB
- SHA256 86a45761a1fc42261d3c9c643c8dba50ed2f0af5f6c65c3c31bfc3508f0b0362
- MD5 5e0d8d0cd5962ca76258ec738dceb83a
- SHA1 56e6784897548996f2669b4ccdedde31fa7a4e07
- SHA512 f819879e020d38cbead747aa19d66feef55c0c81c6cfc76445fbc5cdb836ce151f7af964b7b5fad37ae74695959015d04ac54cd2022efa32522806f8b3a4a06b
- SSDEEP 192:9+DJzX/w8RCEhnRGDPjP3H/lMJIyNcHW3g:kdhnkHvKVNWWw
- TLSH
  T1F1E1D7A1338D60D3FDD4B3F73B605325A26C4581B260F1F28B359EDA0EA8A45DD6036E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

discoverysloppyratrat

behavioral6

discoverysloppyratrat

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy