Overview

overview

10

Static

static

7

d7ca949053...5c.exe

windows7-x64

10

d7ca949053...5c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d7ca949053e70d2afd45a79ca7647fe2d595299e9a364743c49041f47a43545c

  • Size

    3.8MB

  • Sample

    230508-3pwq2sdd46

  • MD5

    5ee95aebf16e775840bad474169b310e

  • SHA1

    ca75074690395e0d161941facdcd87baa78abe64

  • SHA256

    d7ca949053e70d2afd45a79ca7647fe2d595299e9a364743c49041f47a43545c

  • SHA512

    bf7a894380032980b6d09cd2f4882a142266c2abc59d3c7129abb491832a1a90e58eea5317e360bcb1809a3c28898e91d0215891105d17ac786c5b55515d6a54

  • SSDEEP

    98304:/Hgr6ZAswwQkre75nMvjE+algCFxP1xjW1iPPT4M/H+ZoLaVDprZYruDhpMXAr:PIZwQG0NMLEL/xBWqT/RLaLrSiNpMXA

Score
10/10
fatalratinfostealerratvmprotect

Malware Config

Targets

    • Target

      d7ca949053e70d2afd45a79ca7647fe2d595299e9a364743c49041f47a43545c

    • Size

      3.8MB

    • MD5

      5ee95aebf16e775840bad474169b310e

    • SHA1

      ca75074690395e0d161941facdcd87baa78abe64

    • SHA256

      d7ca949053e70d2afd45a79ca7647fe2d595299e9a364743c49041f47a43545c

    • SHA512

      bf7a894380032980b6d09cd2f4882a142266c2abc59d3c7129abb491832a1a90e58eea5317e360bcb1809a3c28898e91d0215891105d17ac786c5b55515d6a54

    • SSDEEP

      98304:/Hgr6ZAswwQkre75nMvjE+algCFxP1xjW1iPPT4M/H+ZoLaVDprZYruDhpMXAr:PIZwQG0NMLEL/xBWqT/RLaLrSiNpMXA

    Score
    10/10
    fatalratinfostealerratvmprotect

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks