Overview

overview

10

Static

static

1

qbcore.dll

windows10-1703-x64

10

qbcore.dll

windows7-x64

10

qbcore.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    qbcore.dll

  • Size

    180KB

  • Sample

    230218-nmxg8sca47

  • MD5

    e532680a840df79887bdacbcd4e47268

  • SHA1

    04b624790d8641d7e0c8767101b5a1ba4607a46b

  • SHA256

    801bfca13856548be36009d457bf0b5c04fde837df84722933a787fb5972ffe2

  • SHA512

    d847cc69c45cc89d6dc1de881cbff4fee66a2f94ad047fe0fc57c6acbfe048ba16befb55708056cff97c8490b9816736a7fd79ccbe02175c11d65ec41e5c5f4c

  • SSDEEP

    3072:CwY6Nf/HNIX5FonuVH/L4XWH1piwTjmPVZr8r+oQYKxYIcnGoDLsL0XpHtg+fJi4:CwYEf/HqSnofL4YGwmNx8SoQYNIcGoPx

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      qbcore.dll

    • Size

      180KB

    • MD5

      e532680a840df79887bdacbcd4e47268

    • SHA1

      04b624790d8641d7e0c8767101b5a1ba4607a46b

    • SHA256

      801bfca13856548be36009d457bf0b5c04fde837df84722933a787fb5972ffe2

    • SHA512

      d847cc69c45cc89d6dc1de881cbff4fee66a2f94ad047fe0fc57c6acbfe048ba16befb55708056cff97c8490b9816736a7fd79ccbe02175c11d65ec41e5c5f4c

    • SSDEEP

      3072:CwY6Nf/HNIX5FonuVH/L4XWH1piwTjmPVZr8r+oQYKxYIcnGoDLsL0XpHtg+fJi4:CwYEf/HqSnofL4YGwmNx8SoQYNIcGoPx

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Blocklisted process makes network request

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v6

Tasks