Overview

overview

10

Static

static

1

7a8087eef2...52.exe

windows7-x64

10

7a8087eef2...52.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7a8087eef21400d5a6ba7a7c6474fc60cb520064756ea1c17d5cf8d066a0fa52

  • Size

    3.2MB

  • Sample

    240308-sk2fmaah7t

  • MD5

    091bb98737891920aafa39a9d09f5ad3

  • SHA1

    6b4aaf96ac3df5ecdbce6dc51b0efa64c3435260

  • SHA256

    7a8087eef21400d5a6ba7a7c6474fc60cb520064756ea1c17d5cf8d066a0fa52

  • SHA512

    4d9cd1d57cdb97be5a053d220472b98ca19e66013c1a0ae7c913a56501909bb7ef05556e17d8f627b9d7761a4fee6dbc11ffdb772e6571d6f13fb652dacbea34

  • SSDEEP

    49152:JS2XlIwMHmFvbm2alfxOLWLrev6H8aa01YORgTqPO5MJ:s2XlIw5C2alJFjfRF

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      7a8087eef21400d5a6ba7a7c6474fc60cb520064756ea1c17d5cf8d066a0fa52

    • Size

      3.2MB

    • MD5

      091bb98737891920aafa39a9d09f5ad3

    • SHA1

      6b4aaf96ac3df5ecdbce6dc51b0efa64c3435260

    • SHA256

      7a8087eef21400d5a6ba7a7c6474fc60cb520064756ea1c17d5cf8d066a0fa52

    • SHA512

      4d9cd1d57cdb97be5a053d220472b98ca19e66013c1a0ae7c913a56501909bb7ef05556e17d8f627b9d7761a4fee6dbc11ffdb772e6571d6f13fb652dacbea34

    • SSDEEP

      49152:JS2XlIwMHmFvbm2alfxOLWLrev6H8aa01YORgTqPO5MJ:s2XlIw5C2alJFjfRF

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks