Overview

overview

10

Static

static

3

30dc5dc2f8...61.exe

windows7-x64

10

30dc5dc2f8...61.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    30dc5dc2f8ee89b8a7b764b09c163929f8710d6d49d38c8021eccf029a066961

  • Size

    3.9MB

  • Sample

    231207-b1qwdsgegr

  • MD5

    ce29721e3d1b71c975df9acc77ab23ca

  • SHA1

    48d53c0e1da944a20c6b681a0270e00dff2e35c8

  • SHA256

    30dc5dc2f8ee89b8a7b764b09c163929f8710d6d49d38c8021eccf029a066961

  • SHA512

    103edf608282cdc650d369c3bc020766ca8982096adca8d84737f36f9815b25fe30ccb3d7565650142210663a6321d86568c47792085e450ae2596f4695b0373

  • SSDEEP

    98304:+18SHoZeL0ZK3XOloYZ5XR1b8CbQDlogUeFeiCRoRIzDE3R/YrvPcX/:+188oZeLs267b8uCeeAiCR0gDuSvPcX

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      30dc5dc2f8ee89b8a7b764b09c163929f8710d6d49d38c8021eccf029a066961

    • Size

      3.9MB

    • MD5

      ce29721e3d1b71c975df9acc77ab23ca

    • SHA1

      48d53c0e1da944a20c6b681a0270e00dff2e35c8

    • SHA256

      30dc5dc2f8ee89b8a7b764b09c163929f8710d6d49d38c8021eccf029a066961

    • SHA512

      103edf608282cdc650d369c3bc020766ca8982096adca8d84737f36f9815b25fe30ccb3d7565650142210663a6321d86568c47792085e450ae2596f4695b0373

    • SSDEEP

      98304:+18SHoZeL0ZK3XOloYZ5XR1b8CbQDlogUeFeiCRoRIzDE3R/YrvPcX/:+188oZeLs267b8uCeeAiCR0gDuSvPcX

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks