General
- Target ratonClient.exe
- Size 17.3MB
- Sample261110-1fy4psbd69
- SHA256 e29cfc9ffbd1a972f1aa63f1e3d35479b885df369db7c97be4cc83c55cf264f6
- MD5 e271a577530953f06b1b058126d3bad8
- SHA1 f18e2d1cae446801370f82a1e69adb97b4788372
- SHA512 1ef5ad66004f2fecaf260bd4c38c56b2093a9e0812bb960f303200e6ad83c223b3622181d1d4be51f7e3b30343139f6038383a9fbd20abe7f1754ee1b54d30a7
- SSDEEP 196608:owl8zU5O6QqOyjr2LF3Ye6YmnwqdU142Uabjzy8Di:6zU5O1cjSLFoBYmn5U1P9TD
- TLSH T1BE07AF02ABE88F2AD0BF47B1A47150145BF1E8966756DA49358CF1BA3B237007B1637F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ratonClient.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
ratonrat
Version
-
V2.1.0
C2
-
nsnosi-39204.portmap.host:39204
Mutex
-
RatonVro_iaVwItH9
Attributes
-
assist
false
-
box
false
-
box_icon
No icon
-
box_msg
Hello, i'm the description of your raton client message box
-
box_title
Hello, im a title for your message box
-
delay
0
-
hide_file
false
-
open_website
false
-
process_critical
false
-
raw
silly21
-
startup
false
-
tag
Infected
-
uac
false
-
vm
false
-
website
https://t.me/ratontool
Targets
-
- Target ratonClient.exe
- Size 17.3MB
- SHA256 e29cfc9ffbd1a972f1aa63f1e3d35479b885df369db7c97be4cc83c55cf264f6
- MD5 e271a577530953f06b1b058126d3bad8
- SHA1 f18e2d1cae446801370f82a1e69adb97b4788372
- SHA512 1ef5ad66004f2fecaf260bd4c38c56b2093a9e0812bb960f303200e6ad83c223b3622181d1d4be51f7e3b30343139f6038383a9fbd20abe7f1754ee1b54d30a7
- SSDEEP 196608:owl8zU5O6QqOyjr2LF3Ye6YmnwqdU142Uabjzy8Di:6zU5O1cjSLFoBYmn5U1P9TD
- TLSH T1BE07AF02ABE88F2AD0BF47B1A47150145BF1E8966756DA49358CF1BA3B237007B1637F
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects RatonRAT payload