Overview

overview

10

Static

static

3

ChromeaSetup.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ChromeaSetup.zip

  • Size

    87.6MB

  • Sample

    231212-17qxeadhc8

  • MD5

    94b76abfb70ec3affac0c002c9f3d837

  • SHA1

    f2d767c01819b90dded352d8e6aa290e31c4a5cc

  • SHA256

    6f6faa5381a18a7b1cae1741bcf915d69bf7e2af2eb44f9446d15266939d4879

  • SHA512

    c1362f9364b3cee97b8c948127d4a21efd5f41f33ba0cf68b2563951392afbd0bc4aa03153f72f7f8698a7412b6ddd7a12f6061c794ceeb20d690eae2ce03dca

  • SSDEEP

    1572864:K7suZWZVgg5C3zQKJzr+JuYLNU/E9vo06E7qMW5SDH5SLpNjtbMBkz2An:KQuZEV/5C3zQy5Yy/Qvo1Eu1SraJMBS

Score
10/10
fatalratdiscoveryinfostealerrat

Malware Config

Targets

    • Target

      ChromeaSetup.exe

    • Size

      88.1MB

    • MD5

      1001791903c0dbd515877048a8508660

    • SHA1

      9994e2b120b8c61035032036694827c105c2b9ea

    • SHA256

      0476986195147a51e7f0b70050b27f73a0de46e2595b8c27eca4ad43064e8cb4

    • SHA512

      6f81497f9bebf5f20a74a30bed9b5474a3d82af3015303ed9008cadec511a5c7741aa00c9d0f9918c5421806c532090182ed280a95709f99bd087384d302d918

    • SSDEEP

      1572864:pHY4l+VZmS5afHwG1znyDUmd5KrwJNYGyMToUWT0fB5aPvJd13Ev0Lsmu:p44lSZ15afHwCtmGrsNYRMMb0JU9EvJ

    Score
    10/10
    fatalratdiscoveryinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks