Overview

overview

10

Static

static

3

sterverexe.exe

windows7-x64

10

sterverexe.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sterverexe.rar

  • Size

    927KB

  • Sample

    240627-xd2v2axbml

  • MD5

    93eab96f04eefd17134794184cb5175a

  • SHA1

    377875a3704dc9f3c467f126084ea96c5df9c38a

  • SHA256

    8a184783ce65a3956db6367a6aa547a82bb431ce6cd5c82de772a9711febc1ac

  • SHA512

    9a3b94902646d3900c57180ddc9e8bce2bcc35851f0732a152fe424a891d76ffcf5daf86a26c32de8ad966f76bef0d30dcf0d5ebae6071e83d8c4d867a6c0cd8

  • SSDEEP

    24576:SEWaRhVPhjx6N8fnPa6ElFXAx+IM57Yby2YvuRZgZll:SEnRhrj1fnS6cFQxrMCfRWx

Score
10/10
fatalratinfostealerpersistencerat

Malware Config

Targets

    • Target

      sterverexe.exe

    • Size

      2.6MB

    • MD5

      6bd5512a96b83249d901a839219d2b0a

    • SHA1

      135782fae43c702daa401e2faaaf963f66e95d46

    • SHA256

      a70fe514acbae5c180dbd53901ac1b9cfeab7d9c20b8c096eeb0fe124d3f28ca

    • SHA512

      e78746312eb6b307a99566412d5de56e1fa0fa8d3eb760f7268eca36bc491f9dcbe86518d0399ffabd4f237b0461e4191f6c5cb77a2fcc2526b8f5ca901c9b2f

    • SSDEEP

      49152:KnsHyjtk2MYC5GDbZnsHyjtk2MYC5GD+TncLwB/S5jSWIOva6DwmI7qmPV8WXTlh:Knsmtk2aaZnsmtk2apcL

    Score
    10/10
    fatalratinfostealerpersistencerat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks