Overview

overview

10

Static

static

3

7225a15c6a...18.exe

windows7-x64

10

7225a15c6a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7225a15c6afbbaf5476f3289f6b161fc543c4b981d72997ca182ae830bbde318

  • Size

    2.1MB

  • Sample

    231022-nvra7ahg97

  • MD5

    724c2a51739b5aba9cffb7e1358b5af3

  • SHA1

    b9e86b7126279b617d0ce6bd84772033b953ef5f

  • SHA256

    7225a15c6afbbaf5476f3289f6b161fc543c4b981d72997ca182ae830bbde318

  • SHA512

    f289f2a6b8b72d2a8f2ae03d00793f489b17254dcc9dbb11a59971991f188bcb87467b6b996e56a18f697ae46f326fe953125b42a53176c2581f2b0d453f890d

  • SSDEEP

    49152:tVef8NffIPbIQ09ufo9m8QCFwyL5FfJel7x1g82T9NlJbGP/m:tVQUIjo9FWIZJerl2+P/m

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      7225a15c6afbbaf5476f3289f6b161fc543c4b981d72997ca182ae830bbde318

    • Size

      2.1MB

    • MD5

      724c2a51739b5aba9cffb7e1358b5af3

    • SHA1

      b9e86b7126279b617d0ce6bd84772033b953ef5f

    • SHA256

      7225a15c6afbbaf5476f3289f6b161fc543c4b981d72997ca182ae830bbde318

    • SHA512

      f289f2a6b8b72d2a8f2ae03d00793f489b17254dcc9dbb11a59971991f188bcb87467b6b996e56a18f697ae46f326fe953125b42a53176c2581f2b0d453f890d

    • SSDEEP

      49152:tVef8NffIPbIQ09ufo9m8QCFwyL5FfJel7x1g82T9NlJbGP/m:tVQUIjo9FWIZJerl2+P/m

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Executes dropped EXE

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks