Overview

overview

10

Static

static

1

583bab667b...03.exe

windows7-x64

10

583bab667b...03.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    583bab667b93dd222594d5d49b3ece7a629927cfeff44b1820f77c0f09dc3303

  • Size

    2.0MB

  • Sample

    231026-rf5f2sdh94

  • MD5

    603a8b54656cb1e32727bdc9a6afa82a

  • SHA1

    1020b8bbb67d41e765080d326b4e770ad68fb7fc

  • SHA256

    583bab667b93dd222594d5d49b3ece7a629927cfeff44b1820f77c0f09dc3303

  • SHA512

    9a3d12d0909aef21cc8556e6ab5c5a847fbfa726a3535fa0bba0a0355a3ce76ff8ff8d8118baf92500c4e256adf9230db87ed6081bcb1290a919e5ee415db8ca

  • SSDEEP

    49152:MoxVO1wKM5P1kk/Xn47jFQSVWCiwMlU/5:MCVO1a168X4vFvcS/5

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      583bab667b93dd222594d5d49b3ece7a629927cfeff44b1820f77c0f09dc3303

    • Size

      2.0MB

    • MD5

      603a8b54656cb1e32727bdc9a6afa82a

    • SHA1

      1020b8bbb67d41e765080d326b4e770ad68fb7fc

    • SHA256

      583bab667b93dd222594d5d49b3ece7a629927cfeff44b1820f77c0f09dc3303

    • SHA512

      9a3d12d0909aef21cc8556e6ab5c5a847fbfa726a3535fa0bba0a0355a3ce76ff8ff8d8118baf92500c4e256adf9230db87ed6081bcb1290a919e5ee415db8ca

    • SSDEEP

      49152:MoxVO1wKM5P1kk/Xn47jFQSVWCiwMlU/5:MCVO1a168X4vFvcS/5

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Executes dropped EXE

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks