Overview

overview

10

Static

static

10

Raton Prof...nt.exe

windows10-2004-x64

10

Raton Prof...nt.exe

windows11-ltsc_2024-x64

10

Raton Prof...rs.exe

windows10-2004-x64

10

Raton Prof...rs.exe

windows11-ltsc_2024-x64

10

Raton Prof...ll.exe

windows10-2004-x64

10

Raton Prof...ll.exe

windows11-ltsc_2024-x64

10

Raton Prof...ds.dll

windows10-2004-x64

1

Raton Prof...ds.dll

windows11-ltsc_2024-x64

8

Raton Prof...PC.dll

windows10-2004-x64

1

Raton Prof...PC.dll

windows11-ltsc_2024-x64

8

Raton Prof...er.dll

windows10-2004-x64

1

Raton Prof...er.dll

windows11-ltsc_2024-x64

1

Raton Prof...rk.dll

windows10-2004-x64

1

Raton Prof...rk.dll

windows11-ltsc_2024-x64

1

Raton Prof...ox.dll

windows10-2004-x64

1

Raton Prof...ox.dll

windows11-ltsc_2024-x64

8

Raton Prof...ol.dll

windows10-2004-x64

1

Raton Prof...ol.dll

windows11-ltsc_2024-x64

8

Raton Prof...re.dll

windows10-2004-x64

1

Raton Prof...re.dll

windows11-ltsc_2024-x64

1

Raton Prof...on.dll

windows10-2004-x64

1

Raton Prof...on.dll

windows11-ltsc_2024-x64

1

Raton Prof...rp.dll

windows10-2004-x64

1

Raton Prof...rp.dll

windows11-ltsc_2024-x64

1

Raton Prof...PF.dll

windows10-2004-x64

1

Raton Prof...PF.dll

windows11-ltsc_2024-x64

8

Raton Prof...ew.dll

windows10-2004-x64

1

Raton Prof...ew.dll

windows11-ltsc_2024-x64

8

Raton Prof...re.dll

windows10-2004-x64

1

Raton Prof...re.dll

windows11-ltsc_2024-x64

8

Raton Prof...es.dll

windows10-2004-x64

1

Raton Prof...es.dll

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    900s
  • max time network
    830s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/10/2026, 20:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Raton Proff v4.2 crack/Builder/clientForCrypters.exe
  • Size 2.4MB
  • Sample261007-y82desfx2p
  • SHA256 cc71485df618bf576ab63ce7872a1b244d6c0b16a8968dcc072015da402bf76c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
ratonratstealer

Malware Config

Extracted

Family

  • ratonrat

Version

  • Professional

Mutex

  • silly1

Attributes
  • assist

    silly11

  • box

    silly8

  • box_icon

    silly10

  • box_msg

    silly9

  • box_title

    silly17

  • defender

    silly23

  • delay

    silly5

  • hide_file

    silly7

  • open_website

    silly13

  • password

    silly20

  • process_critical

    silly6

  • raw

    silly21

  • reconnect

    silly22

  • startup

    silly4

  • tag

    silly16

  • uac

    silly11

  • vm

    silly15

  • website

    silly14

Signatures

  • Family: RatonRAT

    RatonRAT is an information stealer written in C#.

    stealerratonrat
  • Detects RatonRAT payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Raton Proff v4.2 crack\Builder\clientForCrypters.exe
    "C:\Users\Admin\AppData\Local\Temp\Raton Proff v4.2 crack\Builder\clientForCrypters.exe"
    1⤵
      PID:4276
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k GPSvcGroup
      1⤵
        PID:3824
      • C:\Windows\System32\SecurityHealthHost.exe
        \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
        1⤵
          PID:2340

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              stuff.dll
              • Path C:\Users\Admin\AppData\Local\Temp\Costura\43C0B7C2D694D39E487F61CFD3964734\stuff.dll
              • Size 12KB
              • SHA256 d8ee0fc96ce8de2e37bc8fdc051da7c1852b9a510270e663ba17281de23f049b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              memory/4276-44-0x00007FFB2F4D0000-0x00007FFB2FE74000-memory.dmp
              Download

              memory/4276-2-0x00007FFB2F4D0000-0x00007FFB2FE74000-memory.dmp
              Download

              memory/4276-3-0x00007FFB2F4D0000-0x00007FFB2FE74000-memory.dmp
              Download

              memory/4276-25-0x00007FFB2F4D0000-0x00007FFB2FE74000-memory.dmp
              Download

              memory/4276-26-0x00007FFB2F4D0000-0x00007FFB2FE74000-memory.dmp
              Download

              memory/4276-1-0x000002305B8A0000-0x000002305BB16000-memory.dmp
              Download

              memory/4276-50-0x0000023076290000-0x000002307629A000-memory.dmp
              Download

              memory/4276-0-0x00007FFB2F65F000-0x00007FFB2F660000-memory.dmp
              Download

              memory/4276-57-0x00007FFB2F4D0000-0x00007FFB2FE74000-memory.dmp
              Download

              memory/4276-56-0x00007FFB2F4D0000-0x00007FFB2FE74000-memory.dmp
              Download

              memory/4276-58-0x00007FFB2F4D0000-0x00007FFB2FE74000-memory.dmp
              Download

              memory/4276-59-0x00007FFB2F4D0000-0x00007FFB2FE74000-memory.dmp
              Download