General

  • Target

    1e7e6ca2cb29b1ccce5fe9c21b9a66295d78e5865901a6cdeedf22fc29b51ff9

  • Size

    480KB

  • Sample

    250226-fagl9azjz6

  • MD5

    e0b76e3395eab673f9e746c53958aa01

  • SHA1

    88e0303240de00974ace7d0e5961a092ff6553ec

  • SHA256

    1e7e6ca2cb29b1ccce5fe9c21b9a66295d78e5865901a6cdeedf22fc29b51ff9

  • SHA512

    9aeeab428b081d6e4216242b387cae1ebf00d3e9d34edd06159c1ae9defdfdbc51805043f357eeabcadd653823fb526b117b367c9a522a422a79a38617d60283

  • SSDEEP

    3072:E1ltd5LZseWDzoPZ6WS6BLfvgaSlpcD+05faQ:YSzkPDNGEfaQ

Malware Config

Targets

    • Target

      1e7e6ca2cb29b1ccce5fe9c21b9a66295d78e5865901a6cdeedf22fc29b51ff9

    • Size

      480KB

    • MD5

      e0b76e3395eab673f9e746c53958aa01

    • SHA1

      88e0303240de00974ace7d0e5961a092ff6553ec

    • SHA256

      1e7e6ca2cb29b1ccce5fe9c21b9a66295d78e5865901a6cdeedf22fc29b51ff9

    • SHA512

      9aeeab428b081d6e4216242b387cae1ebf00d3e9d34edd06159c1ae9defdfdbc51805043f357eeabcadd653823fb526b117b367c9a522a422a79a38617d60283

    • SSDEEP

      3072:E1ltd5LZseWDzoPZ6WS6BLfvgaSlpcD+05faQ:YSzkPDNGEfaQ

    • FatalRat

      FatalRat is a modular infostealer family written in C++ first appearing in June 2021.

    • Fatalrat family

    • Fatal Rat payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks