Overview

overview

10

Static

static

7

a371b5d993...a9.exe

windows7-x64

10

a371b5d993...a9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a371b5d9937f2bad39c5a4c2077c4ebecb8b9a265404ea63d02f32641eb61da9

  • Size

    5.8MB

  • Sample

    240111-mklsaaehd4

  • MD5

    179f2d355033bba2d318869b5def9d66

  • SHA1

    b61009f257da9c1f41ed01514bc70beb645b3d87

  • SHA256

    a371b5d9937f2bad39c5a4c2077c4ebecb8b9a265404ea63d02f32641eb61da9

  • SHA512

    3577a5137ca3ff58acca3edc36cf556c08763b4141ddd9888139004a3169dee7a16000df44b220a833d11cb82c5e81a7c3ee0a71c349050813b6cd05cbb868b7

  • SSDEEP

    98304:9XqY+0XF02YWwteZJ2WzIgA+4rg+lAaf4/T9GifnRRpcmXsZPjLk60wGvG7z/:9XqFnb9WmRrgOAo6T9GifnRRp5ujLk6z

Score
10/10
fatalratinfostealerratvmprotect

Malware Config

Targets

    • Target

      a371b5d9937f2bad39c5a4c2077c4ebecb8b9a265404ea63d02f32641eb61da9

    • Size

      5.8MB

    • MD5

      179f2d355033bba2d318869b5def9d66

    • SHA1

      b61009f257da9c1f41ed01514bc70beb645b3d87

    • SHA256

      a371b5d9937f2bad39c5a4c2077c4ebecb8b9a265404ea63d02f32641eb61da9

    • SHA512

      3577a5137ca3ff58acca3edc36cf556c08763b4141ddd9888139004a3169dee7a16000df44b220a833d11cb82c5e81a7c3ee0a71c349050813b6cd05cbb868b7

    • SSDEEP

      98304:9XqY+0XF02YWwteZJ2WzIgA+4rg+lAaf4/T9GifnRRpcmXsZPjLk60wGvG7z/:9XqFnb9WmRrgOAo6T9GifnRRp5ujLk6z

    Score
    10/10
    fatalratinfostealerratvmprotect

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks