Overview

overview

10

Static

static

7

b0674d01d3...d8.exe

windows7-x64

10

b0674d01d3...d8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0674d01d33b06ebd927e23527952977c1d401599f770897b4e0e5d351c8eed8

  • Size

    371KB

  • Sample

    231229-j2nresgbb5

  • MD5

    1bfd40f5323dc3059b6d149eef3b7da1

  • SHA1

    251eea4432cbae0a913d5c87b40da661ace19ea7

  • SHA256

    b0674d01d33b06ebd927e23527952977c1d401599f770897b4e0e5d351c8eed8

  • SHA512

    12fbdeac3259640ecfcb08b0b5ccac725494c4289864db8bcf747c17cac9f01a25509ef881f90a3cb5b8fd4beea568f77715bc673bdf1ca758c5c05131f39bb3

  • SSDEEP

    3072:Ad5LZseWDzoPZ6WS6BLfvgaSlpcD+05fLM/HjCRofsn+49KHVstgXDBaQdd7Gu/0:ASzkPDNGEfY/HVfsnneV6coQDnqDas

Score
10/10
fatalratinfostealerratvmprotect

Malware Config

Targets

    • Target

      b0674d01d33b06ebd927e23527952977c1d401599f770897b4e0e5d351c8eed8

    • Size

      371KB

    • MD5

      1bfd40f5323dc3059b6d149eef3b7da1

    • SHA1

      251eea4432cbae0a913d5c87b40da661ace19ea7

    • SHA256

      b0674d01d33b06ebd927e23527952977c1d401599f770897b4e0e5d351c8eed8

    • SHA512

      12fbdeac3259640ecfcb08b0b5ccac725494c4289864db8bcf747c17cac9f01a25509ef881f90a3cb5b8fd4beea568f77715bc673bdf1ca758c5c05131f39bb3

    • SSDEEP

      3072:Ad5LZseWDzoPZ6WS6BLfvgaSlpcD+05fLM/HjCRofsn+49KHVstgXDBaQdd7Gu/0:ASzkPDNGEfY/HVfsnneV6coQDnqDas

    Score
    10/10
    fatalratinfostealerratvmprotect

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks