General

  • Target

    250307-n6hs7atnvf_pw_infected.zip

  • Size

    80KB

  • MD5

    9d4dc6e4d8d70e7a795bf873fb160a20

  • SHA1

    e5dcc071a8b11b1392a50cdc69055e1380581e38

  • SHA256

    817e5a2f9cb06839a10092266e4a7a8b2629953cbfb2da7ea25a75d7dd03cd1c

  • SHA512

    b99ba627c561cf0ec0ef00e7f1e73a033ec0a40b2f565ae6f764b01ad7cc351c3c0d9dbee26948299b9ec7611ea2aae62ab6e960f2ec1136ac6156dd88665c0a

  • SSDEEP

    1536:rHTb/zrOMWNy1w+kC1L0gI89Pc81K8BvUug7tsN2po/VbWow/m39e7RV7b9S0LLV:bXoNhqpTR1K8djesN2pbge7PQ0V

Malware Config

Signatures

  • Fatal Rat payload 1 IoCs
  • Fatalrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 250307-n6hs7atnvf_pw_infected.zip
    .zip

    Password: infected

  • 7031c032fa8275a8c547fac187dc0a04041121a57c9c616fdc068c069ee460e8
    .dll windows:4 windows x86 arch:x86

    eaf22b71fcc2e776a74413812296b09b


    Headers

    Imports

    Exports

    Sections