General
- Target RsquareRAT.exe
- Size 72.2MB
- Sample261029-x9eqdaev2t
- SHA256 185489f9c0b05d0903cfae6988a2e9e3ed60ebd5ba299bf0cce752fd5f15df4c
- MD5 1d50f2daa7edd4bd474710ddb54f883a
- SHA1 79d4fd72b463c97f4fbfa2b5387a468d7ee839cc
- SHA512 43c9ed8691381a3a08cb3b08ed84cb0e44ad023a1713c42330e74239b1423fbd05f91d9d1487f9c940f9cf4d791532f2347c07bb3ba35e0cd7fb7774b63f6b38
- SSDEEP 1572864:NXbq+4F4AndVy2UmXrYGaTMbVe4kQ10adlfVwAgCHgCvQsc:NXbq2kryTWr/0i7kQ1tJrAgQsc
- TLSH T15BF72316A2FC01E8D47AC1BCC667491BEBB2344513209BEF25A48A692F37FE15E7D311
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RsquareRAT.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target RsquareRAT.exe
- Size 72.2MB
- SHA256 185489f9c0b05d0903cfae6988a2e9e3ed60ebd5ba299bf0cce752fd5f15df4c
- MD5 1d50f2daa7edd4bd474710ddb54f883a
- SHA1 79d4fd72b463c97f4fbfa2b5387a468d7ee839cc
- SHA512 43c9ed8691381a3a08cb3b08ed84cb0e44ad023a1713c42330e74239b1423fbd05f91d9d1487f9c940f9cf4d791532f2347c07bb3ba35e0cd7fb7774b63f6b38
- SSDEEP 1572864:NXbq+4F4AndVy2UmXrYGaTMbVe4kQ10adlfVwAgCHgCvQsc:NXbq2kryTWr/0i7kQ1tJrAgQsc
- TLSH T15BF72316A2FC01E8D47AC1BCC667491BEBB2344513209BEF25A48A692F37FE15E7D311
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL