Overview

overview

10

Static

static

1

b1b3d39b03...a2.exe

windows7-x64

10

b1b3d39b03...a2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b1b3d39b039dc591aeedda6195b5a8da9044e1bf4d574f471050447dba6a4ca2

  • Size

    2.8MB

  • Sample

    231201-dkevasec65

  • MD5

    fb5c3286d10602c46a2eda71f6dc9f80

  • SHA1

    55f35e2fec2c4dd7bb050b5559728f78e33b377c

  • SHA256

    b1b3d39b039dc591aeedda6195b5a8da9044e1bf4d574f471050447dba6a4ca2

  • SHA512

    4d0e4ba8b45811d8fbc723404a5a446d6337f43e4ef30f4afac6224aa030e70f63e82374c93bfd43c5932b5410a0ba71bd42d7c88d03d776af2fb4588a187fbf

  • SSDEEP

    49152:rLY5etGvnVEAjHWgYGe7dquNGAnOtNmpHdHEIyQrZX6uaMmSv/VcYpD/UVJ1BclU:40tGvnVhHWgYGoquNLnOtNmpHdk4X6ui

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      b1b3d39b039dc591aeedda6195b5a8da9044e1bf4d574f471050447dba6a4ca2

    • Size

      2.8MB

    • MD5

      fb5c3286d10602c46a2eda71f6dc9f80

    • SHA1

      55f35e2fec2c4dd7bb050b5559728f78e33b377c

    • SHA256

      b1b3d39b039dc591aeedda6195b5a8da9044e1bf4d574f471050447dba6a4ca2

    • SHA512

      4d0e4ba8b45811d8fbc723404a5a446d6337f43e4ef30f4afac6224aa030e70f63e82374c93bfd43c5932b5410a0ba71bd42d7c88d03d776af2fb4588a187fbf

    • SSDEEP

      49152:rLY5etGvnVEAjHWgYGe7dquNGAnOtNmpHdHEIyQrZX6uaMmSv/VcYpD/UVJ1BclU:40tGvnVhHWgYGoquNLnOtNmpHdk4X6ui

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks