General
- Target nigger.exe
- Size 2.4MB
- Sample261007-vdghzsds3k
- SHA256 8c82906079dd71654439a2143b1d77eaed5f839c3e78905e642010dc7efc3781
- MD5 befa73145526589acb05e81027759aba
- SHA1 e010c5d64f838587ecaf01a025e2a85494d3eb07
- SHA512 6c8267fb4ea29a0f4b58a8d4a739f28803f953c63b61e8fb54b5e39edeaa86b2751367bdb040276b9d5966d0b6cc61b6afd53131433bf37cbc4517a7e7ee3af9
- SSDEEP 49152:2/gVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4OK/:4gVUuHjkDGjYQDGuRxzew
- TLSH T1ECC5016833F9860CF1BF0BF4A4B149664B71FC179C96D76C18A579EE04B6F44AA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
nigger.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
ratonrat
Version
-
Professional
C2
-
fsocietyps1-40547.portmap.host:40547
Mutex
-
m18LjPlM3DmDr1XuG3W6Wkj
Attributes
-
assist
false
-
box
false
-
box_icon
Error
-
box_msg
I'm the message box description
-
box_title
Hello World
-
defender
false
-
delay
0
-
hide_file
false
-
open_website
false
-
password
t.me/junk_code
-
process_critical
false
-
raw
silly21
-
reconnect
3
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/example
Targets
-
- Target nigger.exe
- Size 2.4MB
- SHA256 8c82906079dd71654439a2143b1d77eaed5f839c3e78905e642010dc7efc3781
- MD5 befa73145526589acb05e81027759aba
- SHA1 e010c5d64f838587ecaf01a025e2a85494d3eb07
- SHA512 6c8267fb4ea29a0f4b58a8d4a739f28803f953c63b61e8fb54b5e39edeaa86b2751367bdb040276b9d5966d0b6cc61b6afd53131433bf37cbc4517a7e7ee3af9
- SSDEEP 49152:2/gVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4OK/:4gVUuHjkDGjYQDGuRxzew
- TLSH T1ECC5016833F9860CF1BF0BF4A4B149664B71FC179C96D76C18A579EE04B6F44AA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects RatonRAT payload