Overview

overview

10

Static

static

3

f80f4efbba...5c.exe

windows7-x64

10

f80f4efbba...5c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f80f4efbba8fd17b87fa5f672340a64beb532fcd10a5ea4a913bc350aadda15c

  • Size

    136KB

  • Sample

    230608-xx6y4aae4v

  • MD5

    86edc3658df8a67db32fcafb6a1e298f

  • SHA1

    107e53392d6b7b8b24e31cc0aa98a20866a5cce1

  • SHA256

    f80f4efbba8fd17b87fa5f672340a64beb532fcd10a5ea4a913bc350aadda15c

  • SHA512

    44cc40afe5cd10699901c0bb22c0902c2ec096f4ff50e770f6de1d9e558227c845d7fade72ae74f3fac156158286a730d15d908eba36bbc61a36e7d0f74ad79e

  • SSDEEP

    3072:SbsmeDtyVoD8oUnIB5BcyxyvZcMO/6T+:swpyVo4INRAZcR/6T

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      f80f4efbba8fd17b87fa5f672340a64beb532fcd10a5ea4a913bc350aadda15c

    • Size

      136KB

    • MD5

      86edc3658df8a67db32fcafb6a1e298f

    • SHA1

      107e53392d6b7b8b24e31cc0aa98a20866a5cce1

    • SHA256

      f80f4efbba8fd17b87fa5f672340a64beb532fcd10a5ea4a913bc350aadda15c

    • SHA512

      44cc40afe5cd10699901c0bb22c0902c2ec096f4ff50e770f6de1d9e558227c845d7fade72ae74f3fac156158286a730d15d908eba36bbc61a36e7d0f74ad79e

    • SSDEEP

      3072:SbsmeDtyVoD8oUnIB5BcyxyvZcMO/6T+:swpyVo4INRAZcR/6T

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks