Overview

overview

10

Static

static

7

ChromeSetup.exe

windows7-x64

10

ChromeSetup.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48edcd5f70bb537f79f8f36ee60764a191b5748c2dedcd3fc701c209bc1a5d90

  • Size

    2.8MB

  • Sample

    240819-dykyga1grf

  • MD5

    b2774416c4f26afc372c7ec554c76013

  • SHA1

    ae174c5d1e847f6984f8b0c2367ea0ff4a3cf4d8

  • SHA256

    48edcd5f70bb537f79f8f36ee60764a191b5748c2dedcd3fc701c209bc1a5d90

  • SHA512

    0c76a015365c08727f751b1e4fa893cfbb8f1381a8416b752b3ba490b67dd04beb273a0b9ccdb7b49bba585fe9f20fbc18d6d02f2736ae3143bd3f0e79783a5b

  • SSDEEP

    49152:yqJ4NbJ8yCBtB5HKQmoQTanP49oewEc04ksSNNxs1Z/Bx/GCKvO2TIajNC:x0bJGyQpQTkPbeBV4ksl/lKh/jg

Score
10/10
fatalrataspackv2discoveryevasioninfostealerpersistencerattrojanupx

Malware Config

Targets

    • Target

      ChromeSetup.exe

    • Size

      2.9MB

    • MD5

      af20d4d3f30cd1ac68dc415e37519585

    • SHA1

      933061ab91cfa2737ff72312070a61586b2fe4f8

    • SHA256

      5ccd01e983f6522a5f9f2b2341fecfa7e481c2812a0084dfdfb58017901ee9b0

    • SHA512

      28646dacc8e2c7054885df672819710a4a46b4334fc5ca6ba35feabbb1556bbf8f95851c832a32a9ef15c765e3e88da93df0c6a11c4d06463b7291388ea33437

    • SSDEEP

      49152:mTznni+027LpW8dfdtKJanP0xIKYE00AaISNn1+/JT5xDAIoJ+LC2ujI:mnni+027l3fdtKJGPpKZ9AaI7D5ouCvj

    Score
    10/10
    fatalrataspackv2discoveryevasioninfostealerpersistencerattrojanupx

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks