General

  • Target

    1608-0-0x0000000010000000-0x000000001001C000-memory.dmp

  • Size

    112KB

  • MD5

    659d5d1e6fa316a9783f45e118a105fc

  • SHA1

    7681ff8df4b8b4f7108311662bf34f1a16bd8570

  • SHA256

    d0bfe8b2ba68cb5769fb538cb4b559bf5f89f1849477622604d363e330a93e9b

  • SHA512

    c0af88605d4307ebc1cee9a0db94a17f2473a2b9adbe99bf26c025953e7cdba88f79d61cf537af4530655a1a27abdc5e599a3637b6df4c80fba1c38b4cc6684f

  • SSDEEP

    1536:q/53CYUR1wmJkoSA53IXn85c5I9yHT0eRddORcFnToIf2ryZuhPZ6m8gz:qIIC25afeDdYctTBf2rPZ6m8+

Malware Config

Signatures

  • Fatal Rat payload 1 IoCs
  • Fatalrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1608-0-0x0000000010000000-0x000000001001C000-memory.dmp
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections