Overview

overview

10

Static

static

3

导出流�...��.exe

windows7-x64

10

导出流�...��.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    导出流水状况.com_

  • Size

    6.7MB

  • Sample

    230428-ke728acg92

  • MD5

    9de58a47dc0ddc03b7ac693d99687531

  • SHA1

    324b0906be1b53a439c1c1ee322acdff1d8459d8

  • SHA256

    542574d5a06f3e3c362ddf812638bed924558f26579789de432f174792398231

  • SHA512

    bb2135f5c9df6677be900eb4af495bf8adcb6fd9ba95fa07de75ff816e8e7b5b1a6b403b233bfe8a4108a58c9a972f985e801979bf33e6d21f7430d42bfa9d85

  • SSDEEP

    98304:lOEYwyhvXeHcwsAIGeJ1M9wwaf1nW1iu8vl8HTeYJkmBBO/hRVcbgrJ2GBqmylXz:shvXetIbeww21nhjNMnmAkXV7Lqt

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      导出流水状况.com_

    • Size

      6.7MB

    • MD5

      9de58a47dc0ddc03b7ac693d99687531

    • SHA1

      324b0906be1b53a439c1c1ee322acdff1d8459d8

    • SHA256

      542574d5a06f3e3c362ddf812638bed924558f26579789de432f174792398231

    • SHA512

      bb2135f5c9df6677be900eb4af495bf8adcb6fd9ba95fa07de75ff816e8e7b5b1a6b403b233bfe8a4108a58c9a972f985e801979bf33e6d21f7430d42bfa9d85

    • SSDEEP

      98304:lOEYwyhvXeHcwsAIGeJ1M9wwaf1nW1iu8vl8HTeYJkmBBO/hRVcbgrJ2GBqmylXz:shvXetIbeww21nhjNMnmAkXV7Lqt

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks