Overview

overview

10

Static

static

3

b1009b8d10...25.exe

windows7-x64

10

b1009b8d10...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b1009b8d107227e4ac86188a6f5f44e09814c65e8ed6077837f83253afe99225

  • Size

    2.6MB

  • Sample

    231209-hnzfbsfbdk

  • MD5

    5b15faa8c691740955275e26e80fafc5

  • SHA1

    f478d3b62c3bc6fe909832928ae131380faa0468

  • SHA256

    b1009b8d107227e4ac86188a6f5f44e09814c65e8ed6077837f83253afe99225

  • SHA512

    f497e16d53315d830b29d6ade52671ea2d84aeb80391cad5bfba723c64d61ba5451b3957051ee188af8390f3eb8cfc5c5b44c02b09cee01f7ec9f30e4b852dca

  • SSDEEP

    49152:zQoE06wk5MOufRnJ3v3WJwKnMcwbO49VgekNs39dvNfsg0O2iM2K:+/5KpJ3AirKN4vrp2Hl

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      b1009b8d107227e4ac86188a6f5f44e09814c65e8ed6077837f83253afe99225

    • Size

      2.6MB

    • MD5

      5b15faa8c691740955275e26e80fafc5

    • SHA1

      f478d3b62c3bc6fe909832928ae131380faa0468

    • SHA256

      b1009b8d107227e4ac86188a6f5f44e09814c65e8ed6077837f83253afe99225

    • SHA512

      f497e16d53315d830b29d6ade52671ea2d84aeb80391cad5bfba723c64d61ba5451b3957051ee188af8390f3eb8cfc5c5b44c02b09cee01f7ec9f30e4b852dca

    • SSDEEP

      49152:zQoE06wk5MOufRnJ3v3WJwKnMcwbO49VgekNs39dvNfsg0O2iM2K:+/5KpJ3AirKN4vrp2Hl

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks