Overview

overview

10

Static

static

3

685dde158d...73.exe

windows7-x64

10

685dde158d...73.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    685dde158db35f724e25152cdd0c9e399c3e817c6447e50abd66767ad1e67e73

  • Size

    192KB

  • Sample

    230515-hcrw4shd8x

  • MD5

    b360990b86ddae9902108e6229ea9314

  • SHA1

    f0d1f4df642a0835b9c3a330c150f9e2c9c4ce11

  • SHA256

    685dde158db35f724e25152cdd0c9e399c3e817c6447e50abd66767ad1e67e73

  • SHA512

    b77b66f0d37b9af38586cf4b37b72fef31b5c779a67ab6ddd43206b41c94285c559fecbc90fab5c02d9eb6ae9c84acdbf4d215c82915241574bcc7d9a38c57cc

  • SSDEEP

    3072:T1ltd5LZseWDzoPZ6WS6BLfvgaSlpcD+05f:NSzkPDNGEf

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      685dde158db35f724e25152cdd0c9e399c3e817c6447e50abd66767ad1e67e73

    • Size

      192KB

    • MD5

      b360990b86ddae9902108e6229ea9314

    • SHA1

      f0d1f4df642a0835b9c3a330c150f9e2c9c4ce11

    • SHA256

      685dde158db35f724e25152cdd0c9e399c3e817c6447e50abd66767ad1e67e73

    • SHA512

      b77b66f0d37b9af38586cf4b37b72fef31b5c779a67ab6ddd43206b41c94285c559fecbc90fab5c02d9eb6ae9c84acdbf4d215c82915241574bcc7d9a38c57cc

    • SSDEEP

      3072:T1ltd5LZseWDzoPZ6WS6BLfvgaSlpcD+05f:NSzkPDNGEf

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks