Overview

overview

10

Static

static

3

8102e9bee1...3d.exe

windows7-x64

10

8102e9bee1...3d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8102e9bee1323da3bc9ddd5232f8bcb3843e1ddd7bbf7859ee9f167b2ab1593d

  • Size

    4.0MB

  • Sample

    231213-m3bd9sbegq

  • MD5

    9ae7830ff4ead1194119e4151b09d7b6

  • SHA1

    e36741257c0d133c59bebf2aa3fe33344d4e5694

  • SHA256

    8102e9bee1323da3bc9ddd5232f8bcb3843e1ddd7bbf7859ee9f167b2ab1593d

  • SHA512

    e40ca551ba98869fc8aafdec3b8521d09c49d4e094c17f9df60a9056fab3cfce08de5c961b34daac46c1a4b274733d4e5a36ef024baa9322baf1ea64c1bbe241

  • SSDEEP

    49152:C8y4+H/MA9KvdXjuvugsDwy9p6a7ZIcQ2R8+06QlCQ1U2V+6kYS3e+/skGV8rOv1:a/MOeDp6l08+06QxUZ6kb/skbrOO

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      8102e9bee1323da3bc9ddd5232f8bcb3843e1ddd7bbf7859ee9f167b2ab1593d

    • Size

      4.0MB

    • MD5

      9ae7830ff4ead1194119e4151b09d7b6

    • SHA1

      e36741257c0d133c59bebf2aa3fe33344d4e5694

    • SHA256

      8102e9bee1323da3bc9ddd5232f8bcb3843e1ddd7bbf7859ee9f167b2ab1593d

    • SHA512

      e40ca551ba98869fc8aafdec3b8521d09c49d4e094c17f9df60a9056fab3cfce08de5c961b34daac46c1a4b274733d4e5a36ef024baa9322baf1ea64c1bbe241

    • SSDEEP

      49152:C8y4+H/MA9KvdXjuvugsDwy9p6a7ZIcQ2R8+06QlCQ1U2V+6kYS3e+/skGV8rOv1:a/MOeDp6l08+06QxUZ6kb/skbrOO

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks