Overview

overview

10

Static

static

3

35d509fd39...05.exe

windows7-x64

35d509fd39...05.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35d509fd391a328efbc3997b087f16deff4034b8c91df5fc2f285eb76954d805

  • Size

    3.5MB

  • Sample

    231214-sb3bkagaa9

  • MD5

    32dd6257ccccd472e3141d1df32896c8

  • SHA1

    675202bb6a79aa91fbf054b1468b1866f3203626

  • SHA256

    35d509fd391a328efbc3997b087f16deff4034b8c91df5fc2f285eb76954d805

  • SHA512

    d2be97ef8c6a71265043fe0eff4b49df069db2b05e9a05091177bd33f6e59fba1e72c12ae43f9c81a1f3740c3187f1e3b409148bb63202abc441c1676a0ae03a

  • SSDEEP

    98304:5dkXoIbndmG6tfj4yMchYwrcmt9uPS2tKEkE/bcI6aMwQIud:5d7IbkZNhMPS2tGEjcIeIud

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      35d509fd391a328efbc3997b087f16deff4034b8c91df5fc2f285eb76954d805

    • Size

      3.5MB

    • MD5

      32dd6257ccccd472e3141d1df32896c8

    • SHA1

      675202bb6a79aa91fbf054b1468b1866f3203626

    • SHA256

      35d509fd391a328efbc3997b087f16deff4034b8c91df5fc2f285eb76954d805

    • SHA512

      d2be97ef8c6a71265043fe0eff4b49df069db2b05e9a05091177bd33f6e59fba1e72c12ae43f9c81a1f3740c3187f1e3b409148bb63202abc441c1676a0ae03a

    • SSDEEP

      98304:5dkXoIbndmG6tfj4yMchYwrcmt9uPS2tKEkE/bcI6aMwQIud:5d7IbkZNhMPS2tGEjcIeIud

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks