Overview

overview

10

Static

static

1

2c0981a3ce...39.exe

windows7-x64

10

2c0981a3ce...39.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c0981a3ceee83e83747c381986448ac06bad949bd756bc43264e4fddd914639

  • Size

    1.2MB

  • Sample

    231019-j7ze4seh41

  • MD5

    96626a498a8ee503abd98cc7c641c1b5

  • SHA1

    68cb59e4dce54ba6ca33db94f8e337ae11a35249

  • SHA256

    2c0981a3ceee83e83747c381986448ac06bad949bd756bc43264e4fddd914639

  • SHA512

    f88d44dcf52536f6888a322cd1626f92a269298a594cf022211d3972267ee0420d093ce6c421f8f73f68784bcb557f8f46d463a690e9780a1869d72cfb1edfbc

  • SSDEEP

    24576:GFQIVQ+dn+bNoHdgUzuiw5Jpnrw4qjGib9JHslg9Nyhl7RLp5aKVgKIOL5:ZIi+dn+bUWwuiw5JpnU4cB9nNWJxp4KB

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      2c0981a3ceee83e83747c381986448ac06bad949bd756bc43264e4fddd914639

    • Size

      1.2MB

    • MD5

      96626a498a8ee503abd98cc7c641c1b5

    • SHA1

      68cb59e4dce54ba6ca33db94f8e337ae11a35249

    • SHA256

      2c0981a3ceee83e83747c381986448ac06bad949bd756bc43264e4fddd914639

    • SHA512

      f88d44dcf52536f6888a322cd1626f92a269298a594cf022211d3972267ee0420d093ce6c421f8f73f68784bcb557f8f46d463a690e9780a1869d72cfb1edfbc

    • SSDEEP

      24576:GFQIVQ+dn+bNoHdgUzuiw5Jpnrw4qjGib9JHslg9Nyhl7RLp5aKVgKIOL5:ZIi+dn+bUWwuiw5JpnU4cB9nNWJxp4KB

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Executes dropped EXE

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks