Overview

overview

10

Static

static

1

ece2049bf1...58.exe

windows7-x64

10

ece2049bf1...58.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ece2049bf1201a5b0f7a6920b95bef4773683e523eddc5dd38d1bdd4c7515258

  • Size

    2.7MB

  • Sample

    231204-v7jv7sdh95

  • MD5

    f4fb0391754cab22b08d5c518a57268d

  • SHA1

    8d443fbb04a81b053c117e66bc6a069fcc2b1b87

  • SHA256

    ece2049bf1201a5b0f7a6920b95bef4773683e523eddc5dd38d1bdd4c7515258

  • SHA512

    8c2dd062374436c85ce698e7463f6d27f6652d0082aa3bd6637340abd132430fd408e19909af6f0eb84011e2d7d51ad6f9feb302591ce2a8fd9887b73f52b3df

  • SSDEEP

    49152:dLY5etGvnVEAjHWgYGe7dquNGAnOtNmpHdHEIyQrZX6uaMmS83/VcYpD/UVJ1Bcx:G0tGvnVhHWgYGoquNLnOtNmpHdk4X6us

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      ece2049bf1201a5b0f7a6920b95bef4773683e523eddc5dd38d1bdd4c7515258

    • Size

      2.7MB

    • MD5

      f4fb0391754cab22b08d5c518a57268d

    • SHA1

      8d443fbb04a81b053c117e66bc6a069fcc2b1b87

    • SHA256

      ece2049bf1201a5b0f7a6920b95bef4773683e523eddc5dd38d1bdd4c7515258

    • SHA512

      8c2dd062374436c85ce698e7463f6d27f6652d0082aa3bd6637340abd132430fd408e19909af6f0eb84011e2d7d51ad6f9feb302591ce2a8fd9887b73f52b3df

    • SSDEEP

      49152:dLY5etGvnVEAjHWgYGe7dquNGAnOtNmpHdHEIyQrZX6uaMmS83/VcYpD/UVJ1Bcx:G0tGvnVhHWgYGoquNLnOtNmpHdk4X6us

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks