Overview

overview

10

Static

static

1

709956e92a...7b.exe

windows7-x64

10

709956e92a...7b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    709956e92a73b796c223db19ce910449f2f1a7067bfb0d4ac2b9563ca63c287b

  • Size

    3.6MB

  • Sample

    231205-qkewhsbb7x

  • MD5

    2a874105f09f91663d087bde2c0676a7

  • SHA1

    bcec5c048f4cfde187c515027186aa05804bab57

  • SHA256

    709956e92a73b796c223db19ce910449f2f1a7067bfb0d4ac2b9563ca63c287b

  • SHA512

    9f7f80dce069d5445ab4ad40c864c22844310de16265226a58f297f4ecdf2e69b62a544a8ed0c050b2add6a6798b6ebb9f0db2efaacaf055d7922629bba8b1cc

  • SSDEEP

    49152:vS2XlIwMHmFvbm2alfxOLWLrev6H8aa01YORhHq3HeMP:62XlIw5C2alJFjfzHIHl

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      709956e92a73b796c223db19ce910449f2f1a7067bfb0d4ac2b9563ca63c287b

    • Size

      3.6MB

    • MD5

      2a874105f09f91663d087bde2c0676a7

    • SHA1

      bcec5c048f4cfde187c515027186aa05804bab57

    • SHA256

      709956e92a73b796c223db19ce910449f2f1a7067bfb0d4ac2b9563ca63c287b

    • SHA512

      9f7f80dce069d5445ab4ad40c864c22844310de16265226a58f297f4ecdf2e69b62a544a8ed0c050b2add6a6798b6ebb9f0db2efaacaf055d7922629bba8b1cc

    • SSDEEP

      49152:vS2XlIwMHmFvbm2alfxOLWLrev6H8aa01YORhHq3HeMP:62XlIw5C2alJFjfzHIHl

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks