Overview

overview

10

Static

static

3

81aa5f2d6f...fb.exe

windows7-x64

10

81aa5f2d6f...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81aa5f2d6f5ea81d39ea4588900b147b4890efa32d9c0d6d92d0cc2740d136fb

  • Size

    932KB

  • Sample

    240927-lhjpgawbll

  • MD5

    1db213df340e2fadf2a36c6ddd31f2ec

  • SHA1

    f10891c0f9008bdd1978a214f9d76c895f156bbf

  • SHA256

    81aa5f2d6f5ea81d39ea4588900b147b4890efa32d9c0d6d92d0cc2740d136fb

  • SHA512

    49168b4f02bcd44f01844e68b25fb333c5263aca187c1630c3c329e902e3abd21d89ea9d5233340d3876a7df958d77527daa19a94b24004b8c9fd197e8b0180e

  • SSDEEP

    12288:uQ4DOHltXYiYTe/+h3p/ogPeHSA1Kz+EAeuOvth0IZfKErUkqo3KrTm:uQGOFtYpTw+1prwVeuCD9KEolokTm

Score
10/10
fatalratdiscoveryinfostealerrat

Malware Config

Targets

    • Target

      81aa5f2d6f5ea81d39ea4588900b147b4890efa32d9c0d6d92d0cc2740d136fb

    • Size

      932KB

    • MD5

      1db213df340e2fadf2a36c6ddd31f2ec

    • SHA1

      f10891c0f9008bdd1978a214f9d76c895f156bbf

    • SHA256

      81aa5f2d6f5ea81d39ea4588900b147b4890efa32d9c0d6d92d0cc2740d136fb

    • SHA512

      49168b4f02bcd44f01844e68b25fb333c5263aca187c1630c3c329e902e3abd21d89ea9d5233340d3876a7df958d77527daa19a94b24004b8c9fd197e8b0180e

    • SSDEEP

      12288:uQ4DOHltXYiYTe/+h3p/ogPeHSA1Kz+EAeuOvth0IZfKErUkqo3KrTm:uQGOFtYpTw+1prwVeuCD9KEolokTm

    Score
    10/10
    fatalratdiscoveryinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks