TF-MAL-jar.ratty
📛 Threat Title
Malware family: Ratty
Description
ThreatFox malware family `jar.ratty`. Printable name: Ratty.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
jar.ratty
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/jar.ratty
IOC database
- Type
- domain
- Value
jar.ratty- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-jar.ratty
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/jar.ratty
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (9)
-
web:arxiv.org
Abstract Determining the family to which a malicious file belongs is an es-sential component of cyberattack investigation, attribution, and remediation . Performing this task manually is time consuming and requires expert knowledge. Automated tools using that label mal-ware using antivirus detections lack accuracy and/or scalability, making them insuficient for real-world applications. Three ...
-
web:bazaar.abuse.ch
A malware sample can be associated with only one malware family . The page below gives you an overview on malware samples that MalwareBazaar has identified as Ratty .
-
web:malpedia.caad.fkie.fraunhofer.de
Ratty is an open source Java RAT, made available on GitHub and promoted heavily on HackForums. At some point in 2016 / 2017 the original author deleted his repository, but several clones exist.
-
web:rewterz.com
Analysis Summary A sophisticated, multilayered email attack campaign has recently been uncovered, leveraging weaponized PDF invoices to deliver a Java-based Remote Access Trojan (RAT) known as RATty . This campaign targets Windows systems primarily but is capable of compromising Linux and macOS devices as well, provided they have the Java Runtime Environment (JRE) installed. The attack grants ...
-
web:windowsforum.com
The emergence of RESURGE signals more than just another entry in a long line of malware threats. According to CISA, RESURGE contains advanced persistence features inherited from the SPAWNCHIMERA malware family—a group notorious for its ability to survive system reboots and avoid simplistic remediation .
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.morphisec.com
The malware uses the resource resolution handler to detect certain analysis environments: By monitoring which assemblies are requested and when, the malware can identify patterns typical of dynamic analysis tools and adjust its behavior accordingly.
-
web:www.ncsc.gov.uk
How to defend organisations against malware or ransomware attacks.
-
web:www.sec.gov
Cryptocurrency exchanges may stop operating or permanently shut down due to fraud, technical glitches, hackers or malware , which may also affect the price of cryptocurrencies and thus the Fund's investments in cryptocurrency-related instruments or in publicly traded securities of companies engaged in cryptocurrency-related businesses and ...
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.