Overview

overview

10

Static

static

3

ddecb22fb6...b6.exe

windows7-x64

10

ddecb22fb6...b6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ddecb22fb6cd998ef88d3f56de51377beb5cf165988196d312206b850ed090b6

  • Size

    4.0MB

  • Sample

    231211-gm83psgba6

  • MD5

    3850fe533e6cfa28bd851d310dad970c

  • SHA1

    1b9aaa74d647cd720c377a026c046c996fdaeed1

  • SHA256

    ddecb22fb6cd998ef88d3f56de51377beb5cf165988196d312206b850ed090b6

  • SHA512

    825c0fbc5b468f59607f93a23afb371ab4aa440ad17774244cd2e1ad4d090951cc5a22c75aaedad1f958e1ed27dac5f1d922011f55666f9c484f2fe57feb54ca

  • SSDEEP

    49152:C8y4+H/MA9KvdXjuvugsDwy9p6a7ZIcQ2R8+06QlCQ1U2V+6kYS3e+/skGV8rOv1:a/MOeDp6l08+06QxUZ6kb/skbrOO

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      ddecb22fb6cd998ef88d3f56de51377beb5cf165988196d312206b850ed090b6

    • Size

      4.0MB

    • MD5

      3850fe533e6cfa28bd851d310dad970c

    • SHA1

      1b9aaa74d647cd720c377a026c046c996fdaeed1

    • SHA256

      ddecb22fb6cd998ef88d3f56de51377beb5cf165988196d312206b850ed090b6

    • SHA512

      825c0fbc5b468f59607f93a23afb371ab4aa440ad17774244cd2e1ad4d090951cc5a22c75aaedad1f958e1ed27dac5f1d922011f55666f9c484f2fe57feb54ca

    • SSDEEP

      49152:C8y4+H/MA9KvdXjuvugsDwy9p6a7ZIcQ2R8+06QlCQ1U2V+6kYS3e+/skGV8rOv1:a/MOeDp6l08+06QxUZ6kb/skbrOO

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks