fatalrat | 5cc0ab81dcf30e350d280d54db988102e27d16272c46cec89668aac7ecc6341d | Triage

Sharing

General

Target

5cc0ab81dcf30e350d280d54db988102e27d16272c46cec89668aac7ecc6341d
Size

208KB
Sample

250314-t7ze8avthz
MD5

baa9038906373abb1d479471912d9c1a
SHA1

c62b6a79c6cd80517ade142241ace16241466320
SHA256

5cc0ab81dcf30e350d280d54db988102e27d16272c46cec89668aac7ecc6341d
SHA512

fc4392a3658898ea50c63eb692ef3edba9ba21423e47d7fea9524e1478122c0e169cb435398f90658b5c4e4a00822711fb3aae485d9ab86a2fe4bbb63e349588
SSDEEP

3072:rtcCRvZxPKOt5qxtGqGAB+/muK6bWbL2hOhSl5o/F4oYBh:BcCRhIJxQ5AB0mmUG8YB

Score

10^/10

fatalrat discovery infostealer persistence rat stealer trojan

Malware Config

Targets

- Target
  
  5cc0ab81dcf30e350d280d54db988102e27d16272c46cec89668aac7ecc6341d
- Size
  
  208KB
- MD5
  
  baa9038906373abb1d479471912d9c1a
- SHA1
  
  c62b6a79c6cd80517ade142241ace16241466320
- SHA256
  
  5cc0ab81dcf30e350d280d54db988102e27d16272c46cec89668aac7ecc6341d
- SHA512
  
  fc4392a3658898ea50c63eb692ef3edba9ba21423e47d7fea9524e1478122c0e169cb435398f90658b5c4e4a00822711fb3aae485d9ab86a2fe4bbb63e349588
- SSDEEP
  
  3072:rtcCRvZxPKOt5qxtGqGAB+/muK6bWbL2hOhSl5o/F4oYBh:BcCRhIJxQ5AB0mmUG8YB
Score

10^/10

fatalrat discovery infostealer persistence rat stealer trojan
- FatalRat
  FatalRat is a modular infostealer family written in C++ first appearing in June 2021.
  stealer trojan fatalrat
- Fatalrat family
  fatalrat
- Fatal Rat payload
  rat infostealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

fatalratdiscoveryinfostealerpersistenceratstealertrojan

behavioral2

fatalratdiscoveryinfostealerpersistenceratstealertrojan