Overview

overview

10

Static

static

3

10d1137e2e...3b.exe

windows7-x64

10

10d1137e2e...3b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10d1137e2e2b271e4d9bda83c87f890b4b73787d7f5d0a40283dadc37006313b

  • Size

    1.5MB

  • Sample

    231024-d3j7qsca76

  • MD5

    85249aabe9e731ac164dc9709dfa67a8

  • SHA1

    11befc02a239d27215bd85a124264a68daca1b21

  • SHA256

    10d1137e2e2b271e4d9bda83c87f890b4b73787d7f5d0a40283dadc37006313b

  • SHA512

    8f300ab54d29824d3a3a433c5b560cbb0b44af28f71b997afff158fa3ff179686be8e9a9d62b91436ab414f7619b89e4f72fc3d86fe9cae9c804e47c8923ffdd

  • SSDEEP

    24576:FYn2vbog3q93zspdqWLDJpoLGiGA3aTVHObu:F/zoFEPL1poLGP/Vku

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      10d1137e2e2b271e4d9bda83c87f890b4b73787d7f5d0a40283dadc37006313b

    • Size

      1.5MB

    • MD5

      85249aabe9e731ac164dc9709dfa67a8

    • SHA1

      11befc02a239d27215bd85a124264a68daca1b21

    • SHA256

      10d1137e2e2b271e4d9bda83c87f890b4b73787d7f5d0a40283dadc37006313b

    • SHA512

      8f300ab54d29824d3a3a433c5b560cbb0b44af28f71b997afff158fa3ff179686be8e9a9d62b91436ab414f7619b89e4f72fc3d86fe9cae9c804e47c8923ffdd

    • SSDEEP

      24576:FYn2vbog3q93zspdqWLDJpoLGiGA3aTVHObu:F/zoFEPL1poLGP/Vku

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks