Overview

overview

10

Static

static

3

2024-07-09...ia.exe

windows7-x64

10

2024-07-09...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-09_0d6ce4d6524ca7ca8fdbf659131d64ee_mafia

  • Size

    2.8MB

  • Sample

    240709-g7b9gazfkp

  • MD5

    0d6ce4d6524ca7ca8fdbf659131d64ee

  • SHA1

    159bf19151838d297d8dcea1d2b9676fa2299413

  • SHA256

    3885e963299c61566adad31b886082f5b8e9b05f59a1b83898d44494932ac7db

  • SHA512

    3a0405ee7eaa2187e2f81c24d4cdcdb9f3f31761532b2a38c93447251ad9acf414c4dbed4ae7aeb366926378286982ac3dc08a431b74ad1f5b5d57484dd7a9e2

  • SSDEEP

    49152:5e8Pbe4aJLOeOQD63cqM91/3/yPpjfNBqWUa5mAlOKVtSquYS66p5CroB8qX2J:5eSgJLDOQD6MV91/3/yRbNBqWUBLKVYk

Score
10/10
fatalratinfostealerrat

Malware Config

Targets

    • Target

      2024-07-09_0d6ce4d6524ca7ca8fdbf659131d64ee_mafia

    • Size

      2.8MB

    • MD5

      0d6ce4d6524ca7ca8fdbf659131d64ee

    • SHA1

      159bf19151838d297d8dcea1d2b9676fa2299413

    • SHA256

      3885e963299c61566adad31b886082f5b8e9b05f59a1b83898d44494932ac7db

    • SHA512

      3a0405ee7eaa2187e2f81c24d4cdcdb9f3f31761532b2a38c93447251ad9acf414c4dbed4ae7aeb366926378286982ac3dc08a431b74ad1f5b5d57484dd7a9e2

    • SSDEEP

      49152:5e8Pbe4aJLOeOQD63cqM91/3/yPpjfNBqWUa5mAlOKVtSquYS66p5CroB8qX2J:5eSgJLDOQD6MV91/3/yRbNBqWUBLKVYk

    Score
    10/10
    fatalratinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks