General
- Target Chrome.exe
- Size 4.6MB
- Sample240730-pgdcvasfjf
- SHA256 a58b7bd1380f220770408e33f43bdac4ab0bfe336e101484100915bf0518e794
Score
10/10
Malware Config
Targets
-
- Target Chrome.exe
- Size 4.6MB
- SHA256 a58b7bd1380f220770408e33f43bdac4ab0bfe336e101484100915bf0518e794
Score10/10FatalRat
FatalRat is a modular infostealer family written in C++ first appearing in June 2021.
Fatal Rat payload
ASPack v2.12-2.42
Detects executables packed with ASPack v2.12-2.42
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Deletes itself
Executes dropped EXE
Loads dropped DLL
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
Adds Run key to start application
Checks whether UAC is enabled
Suspicious use of SetThreadContext