Overview

overview

10

Static

static

3

8f05b29284...df.exe

windows7-x64

10

8f05b29284...df.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f05b29284b0bf78da28f4591214941d29c7e3c06fc2cf88deec7303499d99df

  • Size

    900KB

  • Sample

    240415-rfk3eaad7w

  • MD5

    b453df3dd59b3deb37751908cd8e677f

  • SHA1

    645c922c5aa6e9eafdfb3b692962cedc0c567f5d

  • SHA256

    8f05b29284b0bf78da28f4591214941d29c7e3c06fc2cf88deec7303499d99df

  • SHA512

    e3ca834e05664323d0922d730599521eb5c3334e1775df7263ee1b6b19f3df1db0558f3c85c4b2541292b485f90578ffb160ef53a430439c1cb2e3be8bd8e58b

  • SSDEEP

    24576:BIs/LMbqQ0r9BK3eeRAPbuTjBIxkul5AXMxABDsEC/:msDGtALeiwCFY4h/

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      8f05b29284b0bf78da28f4591214941d29c7e3c06fc2cf88deec7303499d99df

    • Size

      900KB

    • MD5

      b453df3dd59b3deb37751908cd8e677f

    • SHA1

      645c922c5aa6e9eafdfb3b692962cedc0c567f5d

    • SHA256

      8f05b29284b0bf78da28f4591214941d29c7e3c06fc2cf88deec7303499d99df

    • SHA512

      e3ca834e05664323d0922d730599521eb5c3334e1775df7263ee1b6b19f3df1db0558f3c85c4b2541292b485f90578ffb160ef53a430439c1cb2e3be8bd8e58b

    • SSDEEP

      24576:BIs/LMbqQ0r9BK3eeRAPbuTjBIxkul5AXMxABDsEC/:msDGtALeiwCFY4h/

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks