Analysis
- max time kernel
900s - max time network
464s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
07/10/2026, 20:28
General
- Target Raton Proff v4.2 crack/Builder/Client.exe
- Size 594KB
- Sample261007-y82desfx2p
- SHA256 6293967023e1c48205cfb8cdadcb89a30c249ed056b7fa931bfd3e1d65f18afb
Score
10/10
Malware Config
Extracted
Family
-
ratonrat
Version
-
Professional
Mutex
-
silly1
Attributes
-
assist
silly11
-
box
silly8
-
box_icon
silly10
-
box_msg
silly9
-
box_title
silly17
-
defender
silly23
-
delay
silly5
-
hide_file
silly7
-
open_website
silly13
-
password
silly20
-
process_critical
silly6
-
raw
silly21
-
reconnect
silly22
-
startup
silly4
-
tag
silly16
-
uac
silly11
-
vm
silly15
-
website
silly14
Signatures
- Family: RatonRAT
RatonRAT is an information stealer written in C#.
- Detects RatonRAT payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Raton Proff v4.2 crack\Builder\Client.exe"C:\Users\Admin\AppData\Local\Temp\Raton Proff v4.2 crack\Builder\Client.exe"1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5176-0-0x00007FFF15F2F000-0x00007FFF15F30000-memory.dmp
memory/5176-1-0x000001D3FC960000-0x000001D3FC9FA000-memory.dmp
memory/5176-2-0x00007FFF15DA0000-0x00007FFF16744000-memory.dmp
memory/5176-3-0x000001D3FCE70000-0x000001D3FCE7A000-memory.dmp
memory/5176-4-0x00007FFF15DA0000-0x00007FFF16744000-memory.dmp
memory/5176-5-0x00007FFF15DA0000-0x00007FFF16744000-memory.dmp
memory/5176-6-0x00007FFF15DA0000-0x00007FFF16744000-memory.dmp