Overview

overview

10

Static

static

3

765989b165...a7.exe

windows7-x64

10

765989b165...a7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    765989b16541ced8e464097c54960fbedbb520875e34a630b45537c5d8937da7

  • Size

    1.4MB

  • Sample

    231122-xq4v6aeh2t

  • MD5

    8c0bf864084a36599c18441a3a970c0f

  • SHA1

    e42898dcd37993b2116a3dbbf95dc4c11ef10aa8

  • SHA256

    765989b16541ced8e464097c54960fbedbb520875e34a630b45537c5d8937da7

  • SHA512

    32f40d8b82f1cb2406255c6e59d33bbaeb192d7d6492e444f379b1fb2dd14ca776d88d5023229ce948050b5b65f77f02d05166e8e575ba155cf92fbe0e41ad34

  • SSDEEP

    24576:QUDTJcZN/784qWjcKknk7PLMQ4q8CKKnnaul94jAu/F8FwyA89vSzJJSYUvpKOO+:33JcH/78mOuC6zlaAu2FIPzHSYUvQOO+

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      765989b16541ced8e464097c54960fbedbb520875e34a630b45537c5d8937da7

    • Size

      1.4MB

    • MD5

      8c0bf864084a36599c18441a3a970c0f

    • SHA1

      e42898dcd37993b2116a3dbbf95dc4c11ef10aa8

    • SHA256

      765989b16541ced8e464097c54960fbedbb520875e34a630b45537c5d8937da7

    • SHA512

      32f40d8b82f1cb2406255c6e59d33bbaeb192d7d6492e444f379b1fb2dd14ca776d88d5023229ce948050b5b65f77f02d05166e8e575ba155cf92fbe0e41ad34

    • SSDEEP

      24576:QUDTJcZN/784qWjcKknk7PLMQ4q8CKKnnaul94jAu/F8FwyA89vSzJJSYUvpKOO+:33JcH/78mOuC6zlaAu2FIPzHSYUvQOO+

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Executes dropped EXE

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks