General
- Target .l.exe
- Size 2.4MB
- Sample261004-3p6agsts7r
- SHA256 a42a58e5afafb858bc85a9ec5a8db12db8753cc3d4c0bf6e61f337b33daedf07
- MD5 7b9d53a0e6aa10db2304d1ff7adbfb8e
- SHA1 a1dd04ab5aaeae23c9629fab728b8126763dca55
- SHA512 795deefb9c1d9160e3cba655a9be4aae47c7f74257b0c5e6a2ea86b0b2ff12bf57fd7f3654a77371250d36a5e5e730d889c32ba397a162f84a1956c3e3443e3d
- SSDEEP 49152:TgVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4BAn4s:TgVUuHjkDGjYQDGuRxzew
- TLSH T1B3C5011833F9C718F1AF4BF4A47189664771FD179C62DBAC58A139AE00B6F44BA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
ratonrat
Version
-
Free
C2
-
192.168.0.138:8731
Mutex
-
bjKrLdEnMQnmqhRVpcD1fRM
Attributes
-
assist
false
-
box
false
-
box_icon
No icon
-
box_msg
Hello, i'm the description of your raton client message box
-
box_title
Hello, im a title for your message box
-
defender
false
-
delay
0
-
hide_file
false
-
open_website
false
-
process_critical
false
-
raw
silly21
-
reconnect
3
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/sillyisafed
Targets
-
- Target .l.exe
- Size 2.4MB
- SHA256 a42a58e5afafb858bc85a9ec5a8db12db8753cc3d4c0bf6e61f337b33daedf07
- MD5 7b9d53a0e6aa10db2304d1ff7adbfb8e
- SHA1 a1dd04ab5aaeae23c9629fab728b8126763dca55
- SHA512 795deefb9c1d9160e3cba655a9be4aae47c7f74257b0c5e6a2ea86b0b2ff12bf57fd7f3654a77371250d36a5e5e730d889c32ba397a162f84a1956c3e3443e3d
- SSDEEP 49152:TgVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4BAn4s:TgVUuHjkDGjYQDGuRxzew
- TLSH T1B3C5011833F9C718F1AF4BF4A47189664771FD179C62DBAC58A139AE00B6F44BA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects RatonRAT payload