Overview

overview

10

Static

static

3

d5c48236a5...9d.exe

windows7-x64

10

d5c48236a5...9d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5c48236a5de2d68e64f40c685e9b3e583d0d73d5457331f1332809efae1c79d

  • Size

    324KB

  • Sample

    231221-xgr51abegl

  • MD5

    c17eecabcc478ec9761143ac39d5fd49

  • SHA1

    6a00b754fbdd81b8378ea95ad2402056cf2e4b7c

  • SHA256

    d5c48236a5de2d68e64f40c685e9b3e583d0d73d5457331f1332809efae1c79d

  • SHA512

    8ce968107bf2134658df857bc246565fd0fdf6f02973d66557eac676e6f07874c96441ba6fd6e90b1b1bf5e8a6ba1631a34398ff0da8fb83d3e1777f62f0b505

  • SSDEEP

    6144:T3IF2wpuBBI4tStmnyD/nyW7qifJbQQuHyan7CK82O:T3KCStqyznyW7Lludp8V

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      d5c48236a5de2d68e64f40c685e9b3e583d0d73d5457331f1332809efae1c79d

    • Size

      324KB

    • MD5

      c17eecabcc478ec9761143ac39d5fd49

    • SHA1

      6a00b754fbdd81b8378ea95ad2402056cf2e4b7c

    • SHA256

      d5c48236a5de2d68e64f40c685e9b3e583d0d73d5457331f1332809efae1c79d

    • SHA512

      8ce968107bf2134658df857bc246565fd0fdf6f02973d66557eac676e6f07874c96441ba6fd6e90b1b1bf5e8a6ba1631a34398ff0da8fb83d3e1777f62f0b505

    • SSDEEP

      6144:T3IF2wpuBBI4tStmnyD/nyW7qifJbQQuHyan7CK82O:T3KCStqyznyW7Lludp8V

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks