Overview

overview

10

Static

static

1

爱思助�...31.msi

windows7-x64

10

爱思助�...31.msi

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    爱思助手 v22.36.31.msi.v

  • Size

    238.4MB

  • Sample

    240910-fq5n1sxgpj

  • MD5

    8d2448eb58f29d873ce13ac227b7401d

  • SHA1

    6aef9a1b0b8c04edf5fd854150c6479dc62ec441

  • SHA256

    29845854e66ed3cb86e35fddd39a1cc3036dc0066e721bc2a40ffd2723c2a128

  • SHA512

    4f481566997ff7f957524383124a25c4fa9714f940c83950c171828b65b2d3eaf49d76cb51760ecf72fa435f3c019a66421195e8bf83428ece087c67c20795f1

  • SSDEEP

    6291456:mA6tXSfIyusQa58Z6S/DI7UUUTmTchnDb:mZXSfIb2Q67HiP

Score
10/10
fatalratdiscoveryinfostealerratspywarestealer

Malware Config

Targets

    • Target

      爱思助手 v22.36.31.msi.v

    • Size

      238.4MB

    • MD5

      8d2448eb58f29d873ce13ac227b7401d

    • SHA1

      6aef9a1b0b8c04edf5fd854150c6479dc62ec441

    • SHA256

      29845854e66ed3cb86e35fddd39a1cc3036dc0066e721bc2a40ffd2723c2a128

    • SHA512

      4f481566997ff7f957524383124a25c4fa9714f940c83950c171828b65b2d3eaf49d76cb51760ecf72fa435f3c019a66421195e8bf83428ece087c67c20795f1

    • SSDEEP

      6291456:mA6tXSfIyusQa58Z6S/DI7UUUTmTchnDb:mZXSfIb2Q67HiP

    Score
    10/10
    fatalratdiscoveryinfostealerratspywarestealer

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Modifies file permissions

      discovery

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks