General

  • Target

    1728-2-0x0000000010000000-0x000000001002D000-memory.dmp

  • Size

    180KB

  • MD5

    b6004b663109be23e9e577845c849400

  • SHA1

    d2d40647639e63dbf5f6a0eb1cef0c8883c1a2ff

  • SHA256

    1889b451db16c6dcf7f8ba01ef582c2e20d2c35b03f9f1c0497c97753f421e86

  • SHA512

    4c7258bc1f229e94389f084f8a69d3f7bbdc32199c021be126bb5136b96e36a67bafed6ca40941479d026328c678c9956d9c52fafa5302f79ded6e4cf380ae2f

  • SSDEEP

    3072:Ymu50sK9wH9ze5n5E8cj3WVvbHN3FBbALmpeM5tTBflJwQpnwQfrQ5:Ymu50s4wH9y5n5EFWVvbN3FBM45tTBvk

Malware Config

Signatures

  • Fatal Rat payload 1 IoCs
  • Fatalrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1728-2-0x0000000010000000-0x000000001002D000-memory.dmp
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections