Overview

overview

10

Static

static

3

6c6d7f7d56...f6.exe

windows7-x64

10

6c6d7f7d56...f6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c6d7f7d566de84cd12a53e3c6007982042626e906d8189932e3cca828ed2bf6

  • Size

    3.7MB

  • Sample

    231226-lvhb6sbaal

  • MD5

    8257dbbadbf1508e030161cffa5ab3b0

  • SHA1

    8666310ea7d1b9b1f1519ab614c3100bf6a55b68

  • SHA256

    6c6d7f7d566de84cd12a53e3c6007982042626e906d8189932e3cca828ed2bf6

  • SHA512

    070622c925eacbc4e10c4179d78a526f79dd13377c9beef3fd398dbb1830f1ce7962385b8bbe8d91e26953e134be226253fba76f06e5c319e79fbb97ca5335f0

  • SSDEEP

    49152:F8y4+H/MA9KvdXjuvugsDwy9p6a7ZIcQ2R8+06QlCQ1U2V+6kYdke+/skGV8rOvN:J/MOeDp6l08+06QxUZ6kB/skbrOl

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      6c6d7f7d566de84cd12a53e3c6007982042626e906d8189932e3cca828ed2bf6

    • Size

      3.7MB

    • MD5

      8257dbbadbf1508e030161cffa5ab3b0

    • SHA1

      8666310ea7d1b9b1f1519ab614c3100bf6a55b68

    • SHA256

      6c6d7f7d566de84cd12a53e3c6007982042626e906d8189932e3cca828ed2bf6

    • SHA512

      070622c925eacbc4e10c4179d78a526f79dd13377c9beef3fd398dbb1830f1ce7962385b8bbe8d91e26953e134be226253fba76f06e5c319e79fbb97ca5335f0

    • SSDEEP

      49152:F8y4+H/MA9KvdXjuvugsDwy9p6a7ZIcQ2R8+06QlCQ1U2V+6kYdke+/skGV8rOvN:J/MOeDp6l08+06QxUZ6kB/skbrOl

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks