General

  • Target

    qbcore.dll

  • Size

    108KB

  • Sample

    230226-sxvtlshc74

  • MD5

    fc6ebebbe50f6d2736a5ed2d76509728

  • SHA1

    af263396b3b3f18a84a2c2e3460952c38f7ceff5

  • SHA256

    6987c59c2bc68484b63dc68b6b05b823458cc91dc44c50579b464d1d777bf1b1

  • SHA512

    d91488763f082cfc4d49b00f2cce54c35dc7e824f4c18f23f48ceea88037aba6d7a8f025e695957dc2c70bb5b5b995b1108ab640527481e0726f2e3692e525fb

  • SSDEEP

    1536:Oh3MU/5bLDCMtm/ejs5x2WcHG82RqNoRKV2KoyqkvITnzZh/Qz6r:mt5bLDtm/ejs5xqHG82RWqWITzZRQO

Malware Config

Targets

    • Target

      qbcore.dll

    • Size

      108KB

    • MD5

      fc6ebebbe50f6d2736a5ed2d76509728

    • SHA1

      af263396b3b3f18a84a2c2e3460952c38f7ceff5

    • SHA256

      6987c59c2bc68484b63dc68b6b05b823458cc91dc44c50579b464d1d777bf1b1

    • SHA512

      d91488763f082cfc4d49b00f2cce54c35dc7e824f4c18f23f48ceea88037aba6d7a8f025e695957dc2c70bb5b5b995b1108ab640527481e0726f2e3692e525fb

    • SSDEEP

      1536:Oh3MU/5bLDCMtm/ejs5x2WcHG82RqNoRKV2KoyqkvITnzZh/Qz6r:mt5bLDtm/ejs5xqHG82RWqWITzZRQO

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

    • Fatal Rat payload

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v6

Tasks