Overview

overview

10

Static

static

3

5406036590...be.exe

windows7-x64

10

5406036590...be.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5406036590a984cc1168a575c918b223a8eaafc25ca54eba60cf293d9bf2c0be

  • Size

    6.1MB

  • Sample

    231129-dgnyssea91

  • MD5

    63c67d664927cdb7e163bdb439cb242d

  • SHA1

    9143e2b4bd33f53149f02acd9287f0508e4c0a08

  • SHA256

    5406036590a984cc1168a575c918b223a8eaafc25ca54eba60cf293d9bf2c0be

  • SHA512

    e25074ad31ad88654aa47ac8293fac94bb069f926d362bfd664027c1e76e8106151bf09b3a12cb2f31252097705d357d0db1b6a792a435ac9cddbba2f689d5a0

  • SSDEEP

    49152:edwNM1El1BqxJ2wad9QFEDrdggFIt2sj3yXdaqy50QOsCkHfuxJX+nDfbttKIw57:edwknJ0/T1ePWEwjkE/bcI6aMwQIuj

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      5406036590a984cc1168a575c918b223a8eaafc25ca54eba60cf293d9bf2c0be

    • Size

      6.1MB

    • MD5

      63c67d664927cdb7e163bdb439cb242d

    • SHA1

      9143e2b4bd33f53149f02acd9287f0508e4c0a08

    • SHA256

      5406036590a984cc1168a575c918b223a8eaafc25ca54eba60cf293d9bf2c0be

    • SHA512

      e25074ad31ad88654aa47ac8293fac94bb069f926d362bfd664027c1e76e8106151bf09b3a12cb2f31252097705d357d0db1b6a792a435ac9cddbba2f689d5a0

    • SSDEEP

      49152:edwNM1El1BqxJ2wad9QFEDrdggFIt2sj3yXdaqy50QOsCkHfuxJX+nDfbttKIw57:edwknJ0/T1ePWEwjkE/bcI6aMwQIuj

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks