Overview

overview

10

Static

static

3

af047988b4...68.exe

windows7-x64

10

af047988b4...68.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af047988b4aac732bb2170d21aeb500c29c73cc1bd8a1464cf14234130b53a68

  • Size

    2.5MB

  • Sample

    231208-pqdd7sdh4x

  • MD5

    88fe6af5621d0c427ed3e5409faf627d

  • SHA1

    20bb4297c5d1ed1f558b4e0a1cd1b7d4a0e1c7b1

  • SHA256

    af047988b4aac732bb2170d21aeb500c29c73cc1bd8a1464cf14234130b53a68

  • SHA512

    fa91761b3164d5ab77e6453bc0f3574e1893a9b041ae47fc66d7c8d716f290c3c205870e527a989ffe0db9ae4b9d0c16c327a403762ac70d921cb58e8c8bd8c0

  • SSDEEP

    49152:NBK9Ck5MOy8EK0uREiv6yq/cj332WpyeA2NiijZMNs39dvNfsg0O2iy:G95Os0uRH2cb32peLNFjWN4vrp2v

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      af047988b4aac732bb2170d21aeb500c29c73cc1bd8a1464cf14234130b53a68

    • Size

      2.5MB

    • MD5

      88fe6af5621d0c427ed3e5409faf627d

    • SHA1

      20bb4297c5d1ed1f558b4e0a1cd1b7d4a0e1c7b1

    • SHA256

      af047988b4aac732bb2170d21aeb500c29c73cc1bd8a1464cf14234130b53a68

    • SHA512

      fa91761b3164d5ab77e6453bc0f3574e1893a9b041ae47fc66d7c8d716f290c3c205870e527a989ffe0db9ae4b9d0c16c327a403762ac70d921cb58e8c8bd8c0

    • SSDEEP

      49152:NBK9Ck5MOy8EK0uREiv6yq/cj332WpyeA2NiijZMNs39dvNfsg0O2iy:G95Os0uRH2cb32peLNFjWN4vrp2v

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks