Overview

overview

10

Static

static

3

150daf72d0...27.exe

windows7-x64

10

150daf72d0...27.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    150daf72d05fd62f2aecb50e25b7d6e4ffda38a7459bd4b2b22a05377fc46527

  • Size

    260KB

  • Sample

    230905-3s6qescb7w

  • MD5

    b82fac29e28d912654e8b1f92b3cc0c7

  • SHA1

    f1a645c26816e114501e25e7e8da2c0b97bb0acc

  • SHA256

    150daf72d05fd62f2aecb50e25b7d6e4ffda38a7459bd4b2b22a05377fc46527

  • SHA512

    a50986bd34bf4e2e297b74d8d592e5e7cd1ccade0f290478637d5d49b7aec4b50cc2eb8eea355f2f36f0d697b4064bb721a131625b25451bab30a471fc281d2f

  • SSDEEP

    6144:Ic5M+ZJcIpJ2TktDMMtEALBXAOf5vK77fN:Ic5MgyIpkOrRp67fN

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      150daf72d05fd62f2aecb50e25b7d6e4ffda38a7459bd4b2b22a05377fc46527

    • Size

      260KB

    • MD5

      b82fac29e28d912654e8b1f92b3cc0c7

    • SHA1

      f1a645c26816e114501e25e7e8da2c0b97bb0acc

    • SHA256

      150daf72d05fd62f2aecb50e25b7d6e4ffda38a7459bd4b2b22a05377fc46527

    • SHA512

      a50986bd34bf4e2e297b74d8d592e5e7cd1ccade0f290478637d5d49b7aec4b50cc2eb8eea355f2f36f0d697b4064bb721a131625b25451bab30a471fc281d2f

    • SSDEEP

      6144:Ic5M+ZJcIpJ2TktDMMtEALBXAOf5vK77fN:Ic5MgyIpkOrRp67fN

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks