Overview

overview

10

Static

static

7

letsvpn-latest_1.exe

windows7-x64

10

letsvpn-latest_1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    letsvpn-latest_1.exe.vir

  • Size

    17.6MB

  • Sample

    240830-bytjha1bkg

  • MD5

    3d21d1aafdddb6eb0a1220527434e071

  • SHA1

    7177e238087cbddb734ea69d67a856a3c48034cb

  • SHA256

    5451ef2f179abb86f8d8464815fe4965d4619025395aae3ab2e1337de90f48a3

  • SHA512

    faaf0699149f81bfd78893097c2fcf00255ec8c47159145931e84581f493b5dff3e99469d2304d57e6f902fcfb38b171d57958b067000d3640c5b0b1f756eb66

  • SSDEEP

    393216:VbSXb4YVsff4ePzvH8GVkOu37wT1V46ffPDbDn7u16DPGk:VlM5eLf8CM7wX4SfPrG6DPV

Score
10/10
fatalratdiscoveryevasioninfostealerpersistencerattrojanupx

Malware Config

Targets

    • Target

      letsvpn-latest_1.exe.vir

    • Size

      17.6MB

    • MD5

      3d21d1aafdddb6eb0a1220527434e071

    • SHA1

      7177e238087cbddb734ea69d67a856a3c48034cb

    • SHA256

      5451ef2f179abb86f8d8464815fe4965d4619025395aae3ab2e1337de90f48a3

    • SHA512

      faaf0699149f81bfd78893097c2fcf00255ec8c47159145931e84581f493b5dff3e99469d2304d57e6f902fcfb38b171d57958b067000d3640c5b0b1f756eb66

    • SSDEEP

      393216:VbSXb4YVsff4ePzvH8GVkOu37wT1V46ffPDbDn7u16DPGk:VlM5eLf8CM7wX4SfPrG6DPV

    Score
    10/10
    fatalratdiscoveryevasioninfostealerpersistencerattrojanupx

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks