Overview

overview

10

Static

static

3

b7eebc9ce8...89.exe

windows7-x64

10

b7eebc9ce8...89.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b7eebc9ce8216df07af1bf53a3c62152b2bc878ab57a05f7b2c2390ce13d8889

  • Size

    1.5MB

  • Sample

    231024-d3nj6aca87

  • MD5

    071525d299904ff6bd87b6b1612627ed

  • SHA1

    8ee882ac81fe50d511faea7880c85224b3d37671

  • SHA256

    b7eebc9ce8216df07af1bf53a3c62152b2bc878ab57a05f7b2c2390ce13d8889

  • SHA512

    ddc89ebf0504ef5107b1b9905c62cc95fe7c15e4b143e45f9b729e615369ba44d32a10d9e2d8dc5057676099bf4cbca5079048829e1bb240f63e7de6d525b3b5

  • SSDEEP

    24576:pYn2vbog3q93zspdqWLDJpoLGiGA3aTVHOr:p/zoFEPL1poLGP/VU

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      b7eebc9ce8216df07af1bf53a3c62152b2bc878ab57a05f7b2c2390ce13d8889

    • Size

      1.5MB

    • MD5

      071525d299904ff6bd87b6b1612627ed

    • SHA1

      8ee882ac81fe50d511faea7880c85224b3d37671

    • SHA256

      b7eebc9ce8216df07af1bf53a3c62152b2bc878ab57a05f7b2c2390ce13d8889

    • SHA512

      ddc89ebf0504ef5107b1b9905c62cc95fe7c15e4b143e45f9b729e615369ba44d32a10d9e2d8dc5057676099bf4cbca5079048829e1bb240f63e7de6d525b3b5

    • SSDEEP

      24576:pYn2vbog3q93zspdqWLDJpoLGiGA3aTVHOr:p/zoFEPL1poLGP/VU

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks