General
-
Target
qbcore.dll
-
Size
108KB
-
Sample
230226-sxvtlshc74
-
MD5
fc6ebebbe50f6d2736a5ed2d76509728
-
SHA1
af263396b3b3f18a84a2c2e3460952c38f7ceff5
-
SHA256
6987c59c2bc68484b63dc68b6b05b823458cc91dc44c50579b464d1d777bf1b1
-
SHA512
d91488763f082cfc4d49b00f2cce54c35dc7e824f4c18f23f48ceea88037aba6d7a8f025e695957dc2c70bb5b5b995b1108ab640527481e0726f2e3692e525fb
-
SSDEEP
1536:Oh3MU/5bLDCMtm/ejs5x2WcHG82RqNoRKV2KoyqkvITnzZh/Qz6r:mt5bLDtm/ejs5xqHG82RWqWITzZRQO
Static task
static1
Behavioral task
behavioral1
Sample
qbcore.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
qbcore.dll
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
qbcore.dll
-
Size
108KB
-
MD5
fc6ebebbe50f6d2736a5ed2d76509728
-
SHA1
af263396b3b3f18a84a2c2e3460952c38f7ceff5
-
SHA256
6987c59c2bc68484b63dc68b6b05b823458cc91dc44c50579b464d1d777bf1b1
-
SHA512
d91488763f082cfc4d49b00f2cce54c35dc7e824f4c18f23f48ceea88037aba6d7a8f025e695957dc2c70bb5b5b995b1108ab640527481e0726f2e3692e525fb
-
SSDEEP
1536:Oh3MU/5bLDCMtm/ejs5x2WcHG82RqNoRKV2KoyqkvITnzZh/Qz6r:mt5bLDtm/ejs5xqHG82RWqWITzZRQO
Score10/10-
FatalRat
FatalRat is a modular infostealer family written in C++ first appearing in June 2021.
-
Fatal Rat payload
-
Blocklisted process makes network request
-