Overview

overview

10

Static

static

7

SecuriteIn...55.exe

windows7-x64

10

SecuriteIn...55.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    [email protected]

  • Size

    3.8MB

  • Sample

    230421-y9jvrshg58

  • MD5

    223a3193b04f2b5564495839f5bfb834

  • SHA1

    b4fe59e6ec8bdf5dbf0d4a34e42cbed269f82082

  • SHA256

    211e56cfebf1079ff07d76a303bce1835b6fbc17d84ae5f7c81bce6bfba3ec4f

  • SHA512

    ca94b2ea6971864b399bd73111e4993d25c2675207abc9900c408ff614e63a53398c7e4c778f1043bd63baca2cb077a6fc2783f872263ce8cf3efca11ecd09da

  • SSDEEP

    98304:P+xmA/JbNccZe2TOrilHmUuxnBXzZkHmOB:U13ccZbWPllam

Score
10/10
fatalratinfostealerratvmprotect

Malware Config

Targets

    • Target

      [email protected]

    • Size

      3.8MB

    • MD5

      223a3193b04f2b5564495839f5bfb834

    • SHA1

      b4fe59e6ec8bdf5dbf0d4a34e42cbed269f82082

    • SHA256

      211e56cfebf1079ff07d76a303bce1835b6fbc17d84ae5f7c81bce6bfba3ec4f

    • SHA512

      ca94b2ea6971864b399bd73111e4993d25c2675207abc9900c408ff614e63a53398c7e4c778f1043bd63baca2cb077a6fc2783f872263ce8cf3efca11ecd09da

    • SSDEEP

      98304:P+xmA/JbNccZe2TOrilHmUuxnBXzZkHmOB:U13ccZbWPllam

    Score
    10/10
    fatalratinfostealerratvmprotect

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks