Overview

overview

10

Static

static

1

17c784cd4a...12.exe

windows7-x64

10

17c784cd4a...12.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17c784cd4aea713b258cd4d740b87be2037ae7a17c09dc8fbd54b496c4f7d812

  • Size

    4.5MB

  • Sample

    231215-vhycashgd4

  • MD5

    2390f2ab0086c69d3780bd45f3a23c55

  • SHA1

    f1a507bf4bd11f6159097b1b20e551534581c033

  • SHA256

    17c784cd4aea713b258cd4d740b87be2037ae7a17c09dc8fbd54b496c4f7d812

  • SHA512

    d34c4b228e2a455174a50e71cd3c44cf5ce6a16716c31e289ce099e06e0b91d6e61b63d4ad5c50f93862d52dd7b0647461dde6c3df7643abd4916a8e024e44a7

  • SSDEEP

    98304:WSL/0AAKzg3oRug6oY3zp274J2AWYPSIJxSOz/P8vFySufuqzEEzNpCmhxY7Zm57:Wezzg3Dt9MiPSIJxSOz/0QfFzhBW7Zcz

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      17c784cd4aea713b258cd4d740b87be2037ae7a17c09dc8fbd54b496c4f7d812

    • Size

      4.5MB

    • MD5

      2390f2ab0086c69d3780bd45f3a23c55

    • SHA1

      f1a507bf4bd11f6159097b1b20e551534581c033

    • SHA256

      17c784cd4aea713b258cd4d740b87be2037ae7a17c09dc8fbd54b496c4f7d812

    • SHA512

      d34c4b228e2a455174a50e71cd3c44cf5ce6a16716c31e289ce099e06e0b91d6e61b63d4ad5c50f93862d52dd7b0647461dde6c3df7643abd4916a8e024e44a7

    • SSDEEP

      98304:WSL/0AAKzg3oRug6oY3zp274J2AWYPSIJxSOz/P8vFySufuqzEEzNpCmhxY7Zm57:Wezzg3Dt9MiPSIJxSOz/0QfFzhBW7Zcz

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks