Overview

overview

10

Static

static

1

35cc229675...c8.exe

windows7-x64

10

35cc229675...c8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35cc229675402eb4d0875022047ecdf36e33acdac5275599fd746cd639046bc8

  • Size

    2.7MB

  • Sample

    231204-veg6xadb28

  • MD5

    43fb1c696f55a56f84c2eaba4bfcb3f3

  • SHA1

    839fdc1ab88ff7c3e29bfc8caf8f163fd6bcc6ff

  • SHA256

    35cc229675402eb4d0875022047ecdf36e33acdac5275599fd746cd639046bc8

  • SHA512

    bd7ba1074c5c2fcf1b357bbf900c43a1763574732c70350668318464cba99cd3aa904949fc0c9694395976ed9172d9ddbddd4555acedeb5c27a5565d4dc6a37d

  • SSDEEP

    49152:dLY5etGvnVEAjHWgYGe7dquNGAnOtNmpHdHEIyQrZX6uaMmS83/VcYpD/UVJ1Bcr:G0tGvnVhHWgYGoquNLnOtNmpHdk4X6uk

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      35cc229675402eb4d0875022047ecdf36e33acdac5275599fd746cd639046bc8

    • Size

      2.7MB

    • MD5

      43fb1c696f55a56f84c2eaba4bfcb3f3

    • SHA1

      839fdc1ab88ff7c3e29bfc8caf8f163fd6bcc6ff

    • SHA256

      35cc229675402eb4d0875022047ecdf36e33acdac5275599fd746cd639046bc8

    • SHA512

      bd7ba1074c5c2fcf1b357bbf900c43a1763574732c70350668318464cba99cd3aa904949fc0c9694395976ed9172d9ddbddd4555acedeb5c27a5565d4dc6a37d

    • SSDEEP

      49152:dLY5etGvnVEAjHWgYGe7dquNGAnOtNmpHdHEIyQrZX6uaMmS83/VcYpD/UVJ1Bcr:G0tGvnVhHWgYGoquNLnOtNmpHdk4X6uk

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks