Overview

overview

10

Static

static

1

d5cabd5eeb...b9.exe

windows7-x64

10

d5cabd5eeb...b9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5cabd5eeb95c5522cb66be8d13fd991f6de4743e77e5c60782736f0d04e46b9

  • Size

    73KB

  • Sample

    230910-femdasfb5y

  • MD5

    55a64ee555cce3158a72009b8c2b0cff

  • SHA1

    386232ca3818ec7e3a19f1e54e3970036ee2c682

  • SHA256

    d5cabd5eeb95c5522cb66be8d13fd991f6de4743e77e5c60782736f0d04e46b9

  • SHA512

    303c2cfb82a444d2f957accb3d3f7c2155945f978d715bd66826665901f1eb258bbc173ab1257c9a669ed31e8c71e9c27d387b9864c66def87560489f4a000b7

  • SSDEEP

    1536:7TJneYp48xQdTEprIvLk3FL5QyjtPZA9oioQ+/:nE89J5fjtPm9oN

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      d5cabd5eeb95c5522cb66be8d13fd991f6de4743e77e5c60782736f0d04e46b9

    • Size

      73KB

    • MD5

      55a64ee555cce3158a72009b8c2b0cff

    • SHA1

      386232ca3818ec7e3a19f1e54e3970036ee2c682

    • SHA256

      d5cabd5eeb95c5522cb66be8d13fd991f6de4743e77e5c60782736f0d04e46b9

    • SHA512

      303c2cfb82a444d2f957accb3d3f7c2155945f978d715bd66826665901f1eb258bbc173ab1257c9a669ed31e8c71e9c27d387b9864c66def87560489f4a000b7

    • SSDEEP

      1536:7TJneYp48xQdTEprIvLk3FL5QyjtPZA9oioQ+/:nE89J5fjtPm9oN

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks