Overview

overview

10

Static

static

1

fe67f80a73...5b.exe

windows7-x64

10

fe67f80a73...5b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe67f80a73b6fa7d3020492e8fe0bb5261e838758ecd8069daabd3f74aea095b

  • Size

    3.9MB

  • Sample

    231201-m56m7ahd2y

  • MD5

    fe0768b33b57930a3290f9cfab4c1159

  • SHA1

    26ea1f56ab4a96c256f9c6423d94c12073c44a84

  • SHA256

    fe67f80a73b6fa7d3020492e8fe0bb5261e838758ecd8069daabd3f74aea095b

  • SHA512

    402a52aa381839c9d295cf6eb070fba99d0e250ee438801e4ae014b5134b62bd04e72138043aba96d6c4562a4914c64f1c812cb86477f038524dd5198974687b

  • SSDEEP

    49152:ew1MCHSGX17X8q5CVIRjOHGLis8e9YNcCyN/VcYpD/UVJ1BclhE5di8UR0mxvnMF:eovHz7X3jOHM8eMM/VcixhE5rPKPIb

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      fe67f80a73b6fa7d3020492e8fe0bb5261e838758ecd8069daabd3f74aea095b

    • Size

      3.9MB

    • MD5

      fe0768b33b57930a3290f9cfab4c1159

    • SHA1

      26ea1f56ab4a96c256f9c6423d94c12073c44a84

    • SHA256

      fe67f80a73b6fa7d3020492e8fe0bb5261e838758ecd8069daabd3f74aea095b

    • SHA512

      402a52aa381839c9d295cf6eb070fba99d0e250ee438801e4ae014b5134b62bd04e72138043aba96d6c4562a4914c64f1c812cb86477f038524dd5198974687b

    • SSDEEP

      49152:ew1MCHSGX17X8q5CVIRjOHGLis8e9YNcCyN/VcYpD/UVJ1BclhE5di8UR0mxvnMF:eovHz7X3jOHM8eMM/VcixhE5rPKPIb

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks