Overview

overview

10

Static

static

3

b47d1007a8...3a.exe

windows7-x64

10

b47d1007a8...3a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b47d1007a87efbe774c6ad82c9256efaa77d84e4b2a2b2da004f535b54d8383a

  • Size

    1.0MB

  • Sample

    230907-cdtjfadg32

  • MD5

    43e2c5d84d195e2004510498cb8ee486

  • SHA1

    48c01178e96659ab6a0c917483d3746914ca1731

  • SHA256

    b47d1007a87efbe774c6ad82c9256efaa77d84e4b2a2b2da004f535b54d8383a

  • SHA512

    e962c92eb7ec5b9a8363869d5ebd082b22ec587498947da04233039b62e37b8edaaff31a32c7e9859c4a6fb405149aaadd659f125080b80f200748610f862a15

  • SSDEEP

    12288:ix/etSB4CrDhrsykLluvxAorztLAGllSZNWWn:NSB4oDWyjG1

Score
10/10
fatalratinfostealerpersistencerat

Malware Config

Targets

    • Target

      b47d1007a87efbe774c6ad82c9256efaa77d84e4b2a2b2da004f535b54d8383a

    • Size

      1.0MB

    • MD5

      43e2c5d84d195e2004510498cb8ee486

    • SHA1

      48c01178e96659ab6a0c917483d3746914ca1731

    • SHA256

      b47d1007a87efbe774c6ad82c9256efaa77d84e4b2a2b2da004f535b54d8383a

    • SHA512

      e962c92eb7ec5b9a8363869d5ebd082b22ec587498947da04233039b62e37b8edaaff31a32c7e9859c4a6fb405149aaadd659f125080b80f200748610f862a15

    • SSDEEP

      12288:ix/etSB4CrDhrsykLluvxAorztLAGllSZNWWn:NSB4oDWyjG1

    Score
    10/10
    fatalratinfostealerpersistencerat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks