General

  • Target

    73c6174b41b66acb8f91e54dad3040dfe361d02a7ac8b04effcfb951263e57f6

  • Size

    2.5MB

  • Sample

    231213-yxdszsadg8

  • MD5

    3ec22a37102f0daae1fe3e90dd401a41

  • SHA1

    bb9e16ebfe7c28be118b2230159cb3455159c3f3

  • SHA256

    73c6174b41b66acb8f91e54dad3040dfe361d02a7ac8b04effcfb951263e57f6

  • SHA512

    25915ee423ce01100012d85cc522a87ebfdb28a1c7fa91ef1aaabc6fd69a85379781b126d5fb91a5ff1a31b93ba3bef9601527f40aedb185fa6b9490acf45852

  • SSDEEP

    49152:vMtAJ0LwABY7WIEVYzzaWwgqWtbl9BSO31pKXEejAvtGxDcBPDIZTTV6+T7uci7I:vwLwoYsVYnaWwgqWtbl9BSO31yEejxAK

Malware Config

Targets

    • Target

      73c6174b41b66acb8f91e54dad3040dfe361d02a7ac8b04effcfb951263e57f6

    • Size

      2.5MB

    • MD5

      3ec22a37102f0daae1fe3e90dd401a41

    • SHA1

      bb9e16ebfe7c28be118b2230159cb3455159c3f3

    • SHA256

      73c6174b41b66acb8f91e54dad3040dfe361d02a7ac8b04effcfb951263e57f6

    • SHA512

      25915ee423ce01100012d85cc522a87ebfdb28a1c7fa91ef1aaabc6fd69a85379781b126d5fb91a5ff1a31b93ba3bef9601527f40aedb185fa6b9490acf45852

    • SSDEEP

      49152:vMtAJ0LwABY7WIEVYzzaWwgqWtbl9BSO31pKXEejAvtGxDcBPDIZTTV6+T7uci7I:vwLwoYsVYnaWwgqWtbl9BSO31yEejxAK

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

    • Fatal Rat payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks