███████╗██╗ ██╗██╗██╗ ███╗ ███╗██╗ ██╗████████╗███████╗██╗ ██╗ ██╔════╝██║ ██║██║██║ ████╗ ████║██║ ██║╚══██╔══╝██╔════╝╚██╗██╔╝ █████╗ ██║ ██║██║██║ ██╔████╔██║██║ ██║ ██║ █████╗ ╚███╔╝ ██╔══╝ ╚██╗ ██╔╝██║██║ ██║╚██╔╝██║██║ ██║ ██║ ██╔══╝ ██╔██╗ ███████╗ ╚████╔╝ ██║███████╗ ██║ ╚═╝ ██║╚██████╔╝ ██║ ███████╗██╔╝ ██╗ ╚══════╝ ╚═══╝ ╚═╝╚══════╝ ╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚══════╝╚═╝ ╚═╝

⚠

Santarat

rat1 mutex signatures

[BASIC_INFORMATION]

FAMILY_NAME:

Santarat

CATEGORY:

RAT

DESCRIPTION:

Santarat is a fork of AsyncRat, a remote access trojan (RAT) that provides attackers with remote control capabilities over infected systems. It uses specific mutexes to ensure single instance execution and coordinate its activities on the infected system.

TAGS:

malwaresingle_instancewindows

[MUTEX_SIGNATURES](1)

[MUTEX_01]

setox-7yssdee

ANALYST: @adhikara13 DATE: 2024-12-19

REFERENCES:

https://tria.ge/220809-t38hbsefa3/behavioral2/analog?main_event=Mutex&mutant=setox-7yssdee

[QUICK_ACTIONS]

[THREAT_INTELLIGENCE]

ATTRIBUTION:

⚠Unknown

FIRST_OBSERVED:

2022

[SIGMA_RULE]

[STATISTICS]

MUTEX_COUNT:1

THREAT_ACTORS:1

ALIASES:0

TAGS:3

CATEGORY:RAT

Malware profile loaded successfully