Overview

overview

10

Static

static

3

票助手PDFm.exe

windows7-x64

10

票助手PDFm.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PDFm1.zip

  • Size

    4.1MB

  • Sample

    240930-2wlnzstald

  • MD5

    ec0eae3c501d1d4d36f5dd4c5a095f30

  • SHA1

    1bdad12fcbf83b4702b2f15305a36fefe5a77951

  • SHA256

    9c203350fb212ec4e5d4b331e9b6f5cb4484f10c6e2656017e9167167cb75abc

  • SHA512

    ac9c7f8aa836f61533db0ac56f79c947091559e1ad9fd235fc4c3411d9ac53af68aa4aaff58d90a1fddb6fe118fe0027b5c253e46485d7238d6c75b565cb7f25

  • SSDEEP

    98304:Q/UMSBqfsDMaUQRCEnDqWAxJC6vWOb7HGc0LtZRzvT6yq3AelXIB6/OaIh5kvhc:Q0YmRUUbqWAK6vWOHcLtfbT6lE6hc

Score
10/10
fatalratdiscoveryinfostealerrat

Malware Config

Targets

    • Target

      票助手PDFm.exe

    • Size

      6.3MB

    • MD5

      0d3d7ee3d8b1b32311a3f8f6b43d379b

    • SHA1

      1c68d872ef070187544d671b45a9f17c0f347f99

    • SHA256

      6a6b231182fd8a2df3252d3c8a1ac89054a9721255be8d6245e0fd722b38b40d

    • SHA512

      a4dbf8754c435ecae8cbe42680ae8476158e7f16fc11765792fde05f318f861c834a7956ebbfc5e450df088205ef02d435a96a5d1680c9a45db693734810a99d

    • SSDEEP

      98304:9iOQYYX5YQmdT8PRv0J0hx09BSpKki9jBGrisYdMLU9V09DsL2qEKqjb:jiby94pFKjBGr97eL

    Score
    10/10
    fatalratdiscoveryinfostealerrat

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatal Rat payload

      ratinfostealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks