General
-
Target
svhost.exe
-
Size
140KB
-
Sample
241110-29tlraxcmm
-
MD5
200488185d59ab372448732e08da1b50
-
SHA1
717019dd5769e2a765401df7028fbf367d805268
-
SHA256
1722be3ca7c30055c94f37b865d6f3554c934b23a59f3c1adb7c093473ee0521
-
SHA512
6d84378730d86a0fb0c4b10c47375470595b6e6f42d9cfb6b7224f50aa2af372da2f9ae341e1a277a7c04663be4adce8c6baecc8b29a6815cf056d73a93a2637
-
SSDEEP
1536:Vua+BTv3tIO8MtM+/6jRVGIk1MgHjsPGYYwOda2CqqZOIgQJb0lfjtO+vbWL8xJb:Vn+htWMtf+7GZYGVA2QJgi8xJLDoU
Static task
static1
Behavioral task
behavioral1
Sample
svhost.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
svhost.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
svhost.exe
-
Size
140KB
-
MD5
200488185d59ab372448732e08da1b50
-
SHA1
717019dd5769e2a765401df7028fbf367d805268
-
SHA256
1722be3ca7c30055c94f37b865d6f3554c934b23a59f3c1adb7c093473ee0521
-
SHA512
6d84378730d86a0fb0c4b10c47375470595b6e6f42d9cfb6b7224f50aa2af372da2f9ae341e1a277a7c04663be4adce8c6baecc8b29a6815cf056d73a93a2637
-
SSDEEP
1536:Vua+BTv3tIO8MtM+/6jRVGIk1MgHjsPGYYwOda2CqqZOIgQJb0lfjtO+vbWL8xJb:Vn+htWMtf+7GZYGVA2QJgi8xJLDoU
Score10/10-
FatalRat
FatalRat is a modular infostealer family written in C++ first appearing in June 2021.
-
Fatalrat family
-
Fatal Rat payload
-
Executes dropped EXE
-