Overview

overview

10

Static

static

3

名单助手F.exe

windows7-x64

10

名单助手F.exe

windows10-2004-x64

10

说明.pdf

windows7-x64

3

说明.pdf

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d349a4f542399574898181f06575029c57ef18f1efbd91d5cc667d6cf9f4558

  • Size

    4.1MB

  • Sample

    241106-mefdbaygkl

  • MD5

    0b1d437a39c421428961cf85e69ef990

  • SHA1

    88180f03270399a83c9cd1e3a4d8b988b0f8356f

  • SHA256

    7d349a4f542399574898181f06575029c57ef18f1efbd91d5cc667d6cf9f4558

  • SHA512

    5a3f1e98d43a3f9287bcafec0573b7aab6aff93b062ba242de132bd8d40cda74305d29aa74f8b840ff93c491a79fb2ac2f3ba846ed9421187885478f4648659c

  • SSDEEP

    98304:0NIXmIT2ytgKkrKH9KfolCzzM3+F9m5uKHTeNQNp/:0tG2ytgKkrZbI+FI5uKHTeWr/

Score
10/10
fatalratdiscoveryinfostealerratupx

Malware Config

Targets

    • Target

      名单助手F.exe

    • Size

      6.1MB

    • MD5

      204680a71afc51faa1408ffa2430c3f4

    • SHA1

      1ae73b74dd260cc0568ce9d07daddf904102beff

    • SHA256

      1bf9bdfaff5d065a120f44725ff2dbf8b20d731660168d02dbf89a4f9ee6d336

    • SHA512

      fb1cbd9db14b71722f40956f6ca1128082eac3726241ce15cd313e9391876ed71bd0c15a22a26158331c9bcb105b54fcbace55d4aa3791f72133f98ceebc6688

    • SSDEEP

      98304:1YYX5YQmdT8PRv0J0hx09BSpKki9jBGrisYdMLU9V09DsL2qEKqjb:eiby94pFKjBGr97eL

    Score
    10/10
    fatalratdiscoveryinfostealerratupx

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatalrat family

      fatalrat

    • Fatal Rat payload

      ratinfostealer

    • Downloads MZ/PE file

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      说明.pdf

    • Size

      122KB

    • MD5

      9e99ee5680201031ab6770955eccfd3e

    • SHA1

      bf4c62c62e7282fab99bb88f93530a9944cdddc1

    • SHA256

      1d223a0ffb1706a03ba0566303211c682905e420a3be5acc07f8f10e150aeec2

    • SHA512

      e6988353479dbc8b1cf64371d9b41a477e2516cfb21712ee8ba684e85a217c02cc6fab2a350ac1cb26105d1ae4ad57e4a99d8e768832400ba2563c7ba28095c4

    • SSDEEP

      3072:3sR/hHvp+YfEyC/uyymZUD8f7ocvPIH/j:3QrRyUwmHb

    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks