Overview

overview

10

Static

static

1

f80f8a7250...f0.msi

windows7-x64

6

f80f8a7250...f0.msi

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f80f8a725028bcc09639f7b1ff9439436d974f0bf92871048092eaec5d7458f0

  • Size

    200.6MB

  • Sample

    240406-eespmsaf88

  • MD5

    e43da50b0bbb9e87ce597440713a60b0

  • SHA1

    7aac4d55e08cff1882297cff1c9bf67c4f69da68

  • SHA256

    f80f8a725028bcc09639f7b1ff9439436d974f0bf92871048092eaec5d7458f0

  • SHA512

    2fd0c58689588f04f7053c528c5d76bc678fa8bb1e4a9707a3a19b3517ce21c057249c210d46ba28dccf392216e9b9dfe44ca11773dac1f7f746ecea551d312d

  • SSDEEP

    6291456:RyC80S2EhOoyizyq06TBo1u/3yFyAoJRsZF2:D8d2QfIq0V1uPyFyDJRq

Score
10/10
fatalratdiscoveryinfostealerratspyware

Malware Config

Targets

    • Target

      f80f8a725028bcc09639f7b1ff9439436d974f0bf92871048092eaec5d7458f0

    • Size

      200.6MB

    • MD5

      e43da50b0bbb9e87ce597440713a60b0

    • SHA1

      7aac4d55e08cff1882297cff1c9bf67c4f69da68

    • SHA256

      f80f8a725028bcc09639f7b1ff9439436d974f0bf92871048092eaec5d7458f0

    • SHA512

      2fd0c58689588f04f7053c528c5d76bc678fa8bb1e4a9707a3a19b3517ce21c057249c210d46ba28dccf392216e9b9dfe44ca11773dac1f7f746ecea551d312d

    • SSDEEP

      6291456:RyC80S2EhOoyizyq06TBo1u/3yFyAoJRsZF2:D8d2QfIq0V1uPyFyDJRq

    Score
    10/10
    discoveryfatalratinfostealerratspyware

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks