fatalrat | 95eb869c9556716df5db4ec3d58c9ef068b74bb166b6caef26621d2cdd992f37 | Triage

Sharing

General

Target

95eb869c9556716df5db4ec3d58c9ef068b74bb166b6caef26621d2cdd992f37
Size

153KB
Sample

220201-pwl9asfbe3
MD5

f60082d7a771d76c01aa0933296aebc7
SHA1

40f6222a47bfcb2be6745a5aa9e5839d51ededbf
SHA256

95eb869c9556716df5db4ec3d58c9ef068b74bb166b6caef26621d2cdd992f37
SHA512

4a3444e5e0dea2a144d1429670f6ee1ee7226e566ce7a01b05c36d5648edb45dc6f9e1ad54eee6a2f9f55f925cbaf02ecd5862e0fdd1e2f80f1dcfcdca618b19

Score

10^/10

fatalrat infostealer persistence rat

Malware Config

Targets

- Target
  
  95eb869c9556716df5db4ec3d58c9ef068b74bb166b6caef26621d2cdd992f37
- Size
  
  153KB
- MD5
  
  f60082d7a771d76c01aa0933296aebc7
- SHA1
  
  40f6222a47bfcb2be6745a5aa9e5839d51ededbf
- SHA256
  
  95eb869c9556716df5db4ec3d58c9ef068b74bb166b6caef26621d2cdd992f37
- SHA512
  
  4a3444e5e0dea2a144d1429670f6ee1ee7226e566ce7a01b05c36d5648edb45dc6f9e1ad54eee6a2f9f55f925cbaf02ecd5862e0fdd1e2f80f1dcfcdca618b19
Score

8^/10

persistence
- Sets service image path in registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

ratinfostealerfatalrat

behavioral1

behavioral2