Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

3ed3a370e6...48.exe

windows7-x64

10

3ed3a370e6...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ed3a370e63718d04b814d052a162b19a4f5f8eb0919524bfee658e41b337e48

  • Size

    140KB

  • Sample

    230508-3l56badc67

  • MD5

    c1fb997efc802ab0e5e816fd2424208e

  • SHA1

    9cf21aa59bc27be8bf797541a5e69bbfe97e4987

  • SHA256

    3ed3a370e63718d04b814d052a162b19a4f5f8eb0919524bfee658e41b337e48

  • SHA512

    36ba246828345dbf92fa99229ec14979dbcedd3981d309e4d8bbf0b86087cd14f95299c5a844cd4c1db953511741e99e819c38e5e590a13c0b6c14aa48a1f300

  • SSDEEP

    1536:Vua+BTv3tIO8MtM+/6jRVGIk1MgHjsPGYYwOda2CqqZOIgQJb0lfjtO+vbWL8xJb:Vn+htWMtf+7GZYGVA2QJgi8xJLDoU

Score
10/10
fatalratinfostealerpersistencerat

Malware Config

Targets

    • Target

      3ed3a370e63718d04b814d052a162b19a4f5f8eb0919524bfee658e41b337e48

    • Size

      140KB

    • MD5

      c1fb997efc802ab0e5e816fd2424208e

    • SHA1

      9cf21aa59bc27be8bf797541a5e69bbfe97e4987

    • SHA256

      3ed3a370e63718d04b814d052a162b19a4f5f8eb0919524bfee658e41b337e48

    • SHA512

      36ba246828345dbf92fa99229ec14979dbcedd3981d309e4d8bbf0b86087cd14f95299c5a844cd4c1db953511741e99e819c38e5e590a13c0b6c14aa48a1f300

    • SSDEEP

      1536:Vua+BTv3tIO8MtM+/6jRVGIk1MgHjsPGYYwOda2CqqZOIgQJb0lfjtO+vbWL8xJb:Vn+htWMtf+7GZYGVA2QJgi8xJLDoU

    Score
    10/10
    fatalratinfostealerpersistencerat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks