Overview

overview

10

Static

static

3

1cd4f79327...db.exe

windows7-x64

10

1cd4f79327...db.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1cd4f79327c883ad9b869b2dbb93396e283663613065613421b6f3f43eaf8cdb

  • Size

    3.4MB

  • Sample

    241204-lrjqtsxkbm

  • MD5

    e06b6a425c32bafc08908f7364b4f153

  • SHA1

    3804397a1f2997db63c8d0133fd90b16a995f4eb

  • SHA256

    1cd4f79327c883ad9b869b2dbb93396e283663613065613421b6f3f43eaf8cdb

  • SHA512

    c7613d95eb1bab7f5487106686e21b95d240cf1608cb96f1da17b6f11507f38474695ffb76d143d29f4e83931ebfe418fa3bed5f9d74e353e2fcd69bbea3bb5b

  • SSDEEP

    49152:veKER1p1whDLV9s2XfEIZYo7f1sNX685lWIKgSZQ9Al+gWjTapju2ox6g4/1ns84:ve9Ylq6qetsZL9Al+fWjAYpAMkfl

Score
10/10
fatalratgh0stratdiscoveryinfostealerratupx

Malware Config

Targets

    • Target

      1cd4f79327c883ad9b869b2dbb93396e283663613065613421b6f3f43eaf8cdb

    • Size

      3.4MB

    • MD5

      e06b6a425c32bafc08908f7364b4f153

    • SHA1

      3804397a1f2997db63c8d0133fd90b16a995f4eb

    • SHA256

      1cd4f79327c883ad9b869b2dbb93396e283663613065613421b6f3f43eaf8cdb

    • SHA512

      c7613d95eb1bab7f5487106686e21b95d240cf1608cb96f1da17b6f11507f38474695ffb76d143d29f4e83931ebfe418fa3bed5f9d74e353e2fcd69bbea3bb5b

    • SSDEEP

      49152:veKER1p1whDLV9s2XfEIZYo7f1sNX685lWIKgSZQ9Al+gWjTapju2ox6g4/1ns84:ve9Ylq6qetsZL9Al+fWjAYpAMkfl

    Score
    10/10
    fatalratgh0stratdiscoveryinfostealerratupx

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

      infostealerratfatalrat

    • Fatalrat family

      fatalrat

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

      ratgh0strat

    • Gh0strat family

      gh0strat

    • Fatal Rat payload

      ratinfostealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks