General

  • Target

    c3c89877a369ad1d94342b4e05f0abc03c4cb5560ec6d834c34fc4ca231bf1d9

  • Size

    1.9MB

  • Sample

    231126-rl67tshh64

  • MD5

    1ed1cc584962a2a0234885ca7cbbf87f

  • SHA1

    14e225ae0699a5758dd5aaaa5d1c5037c6c6c944

  • SHA256

    c3c89877a369ad1d94342b4e05f0abc03c4cb5560ec6d834c34fc4ca231bf1d9

  • SHA512

    c11674ff35b49fae7ea9c30a1e6bcc98a8f4b5c8f264f9d55669f22a4083ade5fdb0a091a43ce2d04537ed383d23f0324b565fac1182b66478ec8d1c8f584d17

  • SSDEEP

    49152:47QMGIEr2hyyU/sQaIbd/HA/XXO5YbQBIEbrGygStXBqxoXbrSIQ5kBGpo2A:45GIE6XU/sQDd4/e5YkBIEbrGygSZr9C

Malware Config

Targets

    • Target

      c3c89877a369ad1d94342b4e05f0abc03c4cb5560ec6d834c34fc4ca231bf1d9

    • Size

      1.9MB

    • MD5

      1ed1cc584962a2a0234885ca7cbbf87f

    • SHA1

      14e225ae0699a5758dd5aaaa5d1c5037c6c6c944

    • SHA256

      c3c89877a369ad1d94342b4e05f0abc03c4cb5560ec6d834c34fc4ca231bf1d9

    • SHA512

      c11674ff35b49fae7ea9c30a1e6bcc98a8f4b5c8f264f9d55669f22a4083ade5fdb0a091a43ce2d04537ed383d23f0324b565fac1182b66478ec8d1c8f584d17

    • SSDEEP

      49152:47QMGIEr2hyyU/sQaIbd/HA/XXO5YbQBIEbrGygStXBqxoXbrSIQ5kBGpo2A:45GIE6XU/sQDd4/e5YkBIEbrGygSZr9C

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

    • Fatal Rat payload

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks