Overview

overview

10

Static

static

3

e4b96ab4d5...89.exe

windows7-x64

10

e4b96ab4d5...89.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e4b96ab4d5722f4fb854757073a3a11883d8531403e745d9e073c45c29582889

  • Size

    192KB

  • Sample

    230515-hcs46sfa98

  • MD5

    eb66dc24802087a923db24580d5fda89

  • SHA1

    0def4d74e9ef391b2a8f9f55506a3889a88efa36

  • SHA256

    e4b96ab4d5722f4fb854757073a3a11883d8531403e745d9e073c45c29582889

  • SHA512

    21a8bb93979e46fd58450d84ca3f3328b5ce651ef502e11a623948d43ef921c3f2c1336311007c826e536eb1dd987c468883b200a88d4672ce3c3411413505b6

  • SSDEEP

    3072:01ltd5LZseWDzoPZ6WS6BLfvgaSlpcD+05f:ISzkPDNGEf

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      e4b96ab4d5722f4fb854757073a3a11883d8531403e745d9e073c45c29582889

    • Size

      192KB

    • MD5

      eb66dc24802087a923db24580d5fda89

    • SHA1

      0def4d74e9ef391b2a8f9f55506a3889a88efa36

    • SHA256

      e4b96ab4d5722f4fb854757073a3a11883d8531403e745d9e073c45c29582889

    • SHA512

      21a8bb93979e46fd58450d84ca3f3328b5ce651ef502e11a623948d43ef921c3f2c1336311007c826e536eb1dd987c468883b200a88d4672ce3c3411413505b6

    • SSDEEP

      3072:01ltd5LZseWDzoPZ6WS6BLfvgaSlpcD+05f:ISzkPDNGEf

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks