Overview

overview

10

Static

static

3

7cb4877a66...00.exe

windows7-x64

10

7cb4877a66...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7cb4877a66f0388b9a3ce0563f72bfe74b39d4dc80634db428cee86d15c41d00

  • Size

    3.8MB

  • Sample

    231127-paqplagd9t

  • MD5

    069e092fd0eba1888a71d08223039ff2

  • SHA1

    951adc3fc08b3012fd43739a8fc042f1f8e97ca2

  • SHA256

    7cb4877a66f0388b9a3ce0563f72bfe74b39d4dc80634db428cee86d15c41d00

  • SHA512

    e0b5e6cebcae283f2af9d7c93a2f30cd18505156fed6ae02f470a56d9745eed945c5489de3847ce6ec6c4b9fe84f2e9cad8596ca597396d20f487bbdc1ae5c16

  • SSDEEP

    49152:y3knbYapsl0VRMWxEP0XprnoFNQ/lnq6aYNLbFsIuciOAQ0i1kTM8qxBwWXmZvt1:y3oEKsgvXprnaCLgOAjMRxBLWd+5

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      7cb4877a66f0388b9a3ce0563f72bfe74b39d4dc80634db428cee86d15c41d00

    • Size

      3.8MB

    • MD5

      069e092fd0eba1888a71d08223039ff2

    • SHA1

      951adc3fc08b3012fd43739a8fc042f1f8e97ca2

    • SHA256

      7cb4877a66f0388b9a3ce0563f72bfe74b39d4dc80634db428cee86d15c41d00

    • SHA512

      e0b5e6cebcae283f2af9d7c93a2f30cd18505156fed6ae02f470a56d9745eed945c5489de3847ce6ec6c4b9fe84f2e9cad8596ca597396d20f487bbdc1ae5c16

    • SSDEEP

      49152:y3knbYapsl0VRMWxEP0XprnoFNQ/lnq6aYNLbFsIuciOAQ0i1kTM8qxBwWXmZvt1:y3oEKsgvXprnaCLgOAjMRxBLWd+5

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks