General
- Target nigger.exe
- Size 2.4MB
- Sample261007-vf28gads6p
- SHA256 57cbec03a068784476add2abe652140b042bc8bfabec57b0c88f3caac96be678
- MD5 fb73e278fed371cd4c4e906c2ea46d52
- SHA1 30b91417ec7cfa36a8ec9f6537dbeddbd112ed73
- SHA512 933a711dd80f480b8a90b08b4c32741d8928ae6cde6706acb7d38b463d76acb0a94bc68905094a287329e4649a4e513951620371985b9b2179beaac46c688835
- SSDEEP 49152:6FgVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4OKF:GgVUuHjkDGjYQDGuRxzew
- TLSH T18BC5016833F9860CF1BF0BF4A4B149664B72FD079C96D76C18A579DE04B6F44AA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
nigger.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
ratonrat
Version
-
Professional
C2
-
Reez121010-42691.portmap.host:42691
Mutex
-
WXkhFYuBD4nneD40jKAlSVe
Attributes
-
assist
false
-
box
false
-
box_icon
Error
-
box_msg
I'm the message box description
-
box_title
Hello World
-
defender
false
-
delay
0
-
hide_file
false
-
open_website
false
-
password
t.me/junk_code
-
process_critical
false
-
raw
silly21
-
reconnect
3
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/example
Targets
-
- Target nigger.exe
- Size 2.4MB
- SHA256 57cbec03a068784476add2abe652140b042bc8bfabec57b0c88f3caac96be678
- MD5 fb73e278fed371cd4c4e906c2ea46d52
- SHA1 30b91417ec7cfa36a8ec9f6537dbeddbd112ed73
- SHA512 933a711dd80f480b8a90b08b4c32741d8928ae6cde6706acb7d38b463d76acb0a94bc68905094a287329e4649a4e513951620371985b9b2179beaac46c688835
- SSDEEP 49152:6FgVUlsHjkmiGWU5+5WDtsclR0BxMzaRw4OKF:GgVUuHjkDGjYQDGuRxzew
- TLSH T18BC5016833F9860CF1BF0BF4A4B149664B72FD079C96D76C18A579DE04B6F44AA10B23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects RatonRAT payload