Overview

overview

10

Static

static

1

d034f51c56...1a.exe

windows7-x64

10

d034f51c56...1a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d034f51c56aff89183119dc15cb6f966960f304e05c57b0f4958cecfc2d4811a

  • Size

    1.1MB

  • Sample

    231130-flyd5sgb7v

  • MD5

    c538e111df08e83a056625baa3255333

  • SHA1

    3196ef0ec82cbdc2cac8727fc034bfc994ca8f0b

  • SHA256

    d034f51c56aff89183119dc15cb6f966960f304e05c57b0f4958cecfc2d4811a

  • SHA512

    1a2d2fe8e7e382301228077b2beac6976c484e64ea849f7ba99153ca5b27b08b6f986fa5936d6ab9f282d0fdd78a76e769d15cd6e7a5ee0e8b143485fa751a12

  • SSDEEP

    24576:zwDXIGPt2U4q9+Jpxcx7REstoKcCuj5qAQNvtOKer50/Zy6+:gIGo3TI7RBo7qZvtOp5n6+

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      d034f51c56aff89183119dc15cb6f966960f304e05c57b0f4958cecfc2d4811a

    • Size

      1.1MB

    • MD5

      c538e111df08e83a056625baa3255333

    • SHA1

      3196ef0ec82cbdc2cac8727fc034bfc994ca8f0b

    • SHA256

      d034f51c56aff89183119dc15cb6f966960f304e05c57b0f4958cecfc2d4811a

    • SHA512

      1a2d2fe8e7e382301228077b2beac6976c484e64ea849f7ba99153ca5b27b08b6f986fa5936d6ab9f282d0fdd78a76e769d15cd6e7a5ee0e8b143485fa751a12

    • SSDEEP

      24576:zwDXIGPt2U4q9+Jpxcx7REstoKcCuj5qAQNvtOKer50/Zy6+:gIGo3TI7RBo7qZvtOp5n6+

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks