Overview

overview

10

Static

static

1

23731d084a...38.exe

windows7-x64

7

23731d084a...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23731d084a2418d4a284a2b70eccf69bd7b1e07d92aaad652ee9653b27affc38

  • Size

    3.8MB

  • Sample

    240106-ne4xcagcd2

  • MD5

    1198f58e6ec170af26028143ce0b6b8d

  • SHA1

    a9c72a67e1574b4589aaee146f6251a4488a6c22

  • SHA256

    23731d084a2418d4a284a2b70eccf69bd7b1e07d92aaad652ee9653b27affc38

  • SHA512

    475f01395b52b19269d455bd568e9c3ca75b901d46c9fccbcaa66e5c65c57a3c66ddd7e44fdcb48fc2c216784b124209030786b89de66916ab5f5647dd6aa314

  • SSDEEP

    49152:qhMG0vhGhZSDHFRsTfgeqTIcfPBtroB8qXzjpia:qh0vNFRsTknB+X

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      23731d084a2418d4a284a2b70eccf69bd7b1e07d92aaad652ee9653b27affc38

    • Size

      3.8MB

    • MD5

      1198f58e6ec170af26028143ce0b6b8d

    • SHA1

      a9c72a67e1574b4589aaee146f6251a4488a6c22

    • SHA256

      23731d084a2418d4a284a2b70eccf69bd7b1e07d92aaad652ee9653b27affc38

    • SHA512

      475f01395b52b19269d455bd568e9c3ca75b901d46c9fccbcaa66e5c65c57a3c66ddd7e44fdcb48fc2c216784b124209030786b89de66916ab5f5647dd6aa314

    • SSDEEP

      49152:qhMG0vhGhZSDHFRsTfgeqTIcfPBtroB8qXzjpia:qh0vNFRsTknB+X

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks