General

  • Target

    3d12aff4739ada8c653a15ff3fe7666f9e910d29e3ed0a4b578aeda59a82ad8c

  • Size

    856KB

  • Sample

    231024-je84vadc36

  • MD5

    0c9e6359e8f57407efbc77b2f8302bae

  • SHA1

    055cb11fa6e38407dfbb6602952fcf2811427198

  • SHA256

    3d12aff4739ada8c653a15ff3fe7666f9e910d29e3ed0a4b578aeda59a82ad8c

  • SHA512

    93f91d515d19dfae26478d28658556b4e9850c0a41b54105983a104b9c5d8445d44022aef00e72f1c92c6f3b619bec8bd77991cae51f9050ec826447a65fb082

  • SSDEEP

    12288:Wlof9k0cYDs6G9qVMy39ykLlJ58Jj8Ju8J8k:M0cYDzJ+O/uk

Malware Config

Targets

    • Target

      3d12aff4739ada8c653a15ff3fe7666f9e910d29e3ed0a4b578aeda59a82ad8c

    • Size

      856KB

    • MD5

      0c9e6359e8f57407efbc77b2f8302bae

    • SHA1

      055cb11fa6e38407dfbb6602952fcf2811427198

    • SHA256

      3d12aff4739ada8c653a15ff3fe7666f9e910d29e3ed0a4b578aeda59a82ad8c

    • SHA512

      93f91d515d19dfae26478d28658556b4e9850c0a41b54105983a104b9c5d8445d44022aef00e72f1c92c6f3b619bec8bd77991cae51f9050ec826447a65fb082

    • SSDEEP

      12288:Wlof9k0cYDs6G9qVMy39ykLlJ58Jj8Ju8J8k:M0cYDzJ+O/uk

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

    • Fatal Rat payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks