Overview

overview

10

Static

static

3

2023-08-26...JC.exe

windows7-x64

10

2023-08-26...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2023-08-26_f5bde7dc4c139488d3dd8434e92a5cc4_mafia_JC.exe

  • Size

    96KB

  • Sample

    231001-z99lvsdg8v

  • MD5

    f5bde7dc4c139488d3dd8434e92a5cc4

  • SHA1

    7b682d6607e2a11a88d34e4ad141e4135bdde589

  • SHA256

    0373e6b54ee6a2016973e3764af817b19b3aa9cb97e77845c86227eb215b4e72

  • SHA512

    de8e99335e1459374838baff9d0af4ed3b7a425813de9e4649d613b4165f96d374ebd5db340a3dcadab3bd8a197806146aee26527dc16030534a2c0f4da8dfa0

  • SSDEEP

    1536:J0FfM5+DncE24ujIds67Ef+TTd014UQcqYs3sbTP:WFfM4D1/2+W14UQcqYs

Score
10/10
fatalrataspackv2infostealerratupx

Malware Config

Targets

    • Target

      2023-08-26_f5bde7dc4c139488d3dd8434e92a5cc4_mafia_JC.exe

    • Size

      96KB

    • MD5

      f5bde7dc4c139488d3dd8434e92a5cc4

    • SHA1

      7b682d6607e2a11a88d34e4ad141e4135bdde589

    • SHA256

      0373e6b54ee6a2016973e3764af817b19b3aa9cb97e77845c86227eb215b4e72

    • SHA512

      de8e99335e1459374838baff9d0af4ed3b7a425813de9e4649d613b4165f96d374ebd5db340a3dcadab3bd8a197806146aee26527dc16030534a2c0f4da8dfa0

    • SSDEEP

      1536:J0FfM5+DncE24ujIds67Ef+TTd014UQcqYs3sbTP:WFfM4D1/2+W14UQcqYs

    Score
    10/10
    fatalrataspackv2infostealerratupx

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Downloads MZ/PE file

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks