Overview

overview

10

Static

static

1

出_票_单.exe

windows7-x64

10

出_票_单.exe

windows10-2004-x64

10

密码1129.pdf

windows7-x64

1

密码1129.pdf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfc413f1f32e00e07232b6ef976de322f8cdd6396fe174838dba87d696e8836a

  • Size

    1.9MB

  • Sample

    231201-dkgnwsed5s

  • MD5

    0255b7b7101c9e2f3c4337354bb9e41c

  • SHA1

    e271cb7000c137a219d4406c0b32ef83ef44a3c7

  • SHA256

    dfc413f1f32e00e07232b6ef976de322f8cdd6396fe174838dba87d696e8836a

  • SHA512

    5d6fd5f92665b1010b42f9c76fee515b9c9f8c573dde87e57b827858528c76c1daf5a30e134e054b8a18809ba9ae6df3be8e67cdc7f31d0461c418184c89e81c

  • SSDEEP

    49152:fPKkt1VQsUCu+AP1LZHkzKy3nBkFHznDdUQGs86b:nKAlURNyL3nB0rDdUQGhC

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      出_票_单.exe

    • Size

      2.8MB

    • MD5

      fb5c3286d10602c46a2eda71f6dc9f80

    • SHA1

      55f35e2fec2c4dd7bb050b5559728f78e33b377c

    • SHA256

      b1b3d39b039dc591aeedda6195b5a8da9044e1bf4d574f471050447dba6a4ca2

    • SHA512

      4d0e4ba8b45811d8fbc723404a5a446d6337f43e4ef30f4afac6224aa030e70f63e82374c93bfd43c5932b5410a0ba71bd42d7c88d03d776af2fb4588a187fbf

    • SSDEEP

      49152:rLY5etGvnVEAjHWgYGe7dquNGAnOtNmpHdHEIyQrZX6uaMmSv/VcYpD/UVJ1BclU:40tGvnVhHWgYGoquNLnOtNmpHdk4X6ui

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      密码1129.pdf

    • Size

      162KB

    • MD5

      298ff11515e13992b1cddc2bfe1be6b8

    • SHA1

      5838ce9e1c612aa1abce5773104fb23d1603834e

    • SHA256

      ed7484f5d5b25593944dae28d401e3412b1e47e6c62677b547f155751c7f14fc

    • SHA512

      9cbf3d489c9aec38125516f716fef887294fe7f96304bf80282f841b64a546dea247471e5b027fa6d690c18a67a21539beb18ada51d32801deabce4b02ca2eb7

    • SSDEEP

      3072:4H9ebySXGFSzd29mmfAYRY/Fl60jToIUQcRZ8pEkXl3YJG6GSW68CE26:Y9SRMSUoCW/FsGoIUnj8Nr6Gw8z

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks