fatalrat | bea052b739df6a5fa7767f6c547b97751ecc580cdf9f8454add75e0e68bc02fc | Triage

Sharing

General

Target

250307-n6gwwswrsk_pw_infected.zip
Size

57KB
Sample

250319-v9ygdatkt3
MD5

eddda6523bd3654c1d712802a295d0bb
SHA1

7f461a402c14d37ad8bde070a776accc35b1b26d
SHA256

bea052b739df6a5fa7767f6c547b97751ecc580cdf9f8454add75e0e68bc02fc
SHA512

1caf8c7995c90c58aec920073a27bdb243552fe150336be961761428b02061d64a44403fb789a7a3947be1cbb6551b80c94648eaf33b35a2a3275f51d8aa4e5e
SSDEEP

1536:rIIKOfAKmKCHzriUnACUGHMh4BbFqMb6EdOwXR1/JkIDHVX0hCV/aoRWDtMwG5jt:rIgfX+ri0HMaBbFq2h9P/GIDR0hCRaoh

Score

10^/10

fatalrat discovery infostealer rat

Malware Config

Extracted

Family

fatalrat

C2

103.171.167.50

Targets

- Target
  
  312dcfade140789f9f5ec30d66bfcb3614b4ec697c005b53db571c8bc8d90b91
- Size
  
  116KB
- MD5
  
  ed6837f0e351aff09db3c8ee93fbcf06
- SHA1
  
  9861b4bf6dc84a553b4c84de04262914b3453dfc
- SHA256
  
  312dcfade140789f9f5ec30d66bfcb3614b4ec697c005b53db571c8bc8d90b91
- SHA512
  
  2dc9b7bc5bba015960a9b4910370787e56873efce0439934a8e43abf5481367c75bbffe81eda053d7b2d9edf52e9feca90ccfde5cf46f1aef98aa8e0babb08e4
- SSDEEP
  
  1536:01Pk0NR1wAJuATVg65YYloLx5c5xpp+awXmGVNuR8FnToIf3srT5uDP56WSO:YJuATOEYg5xP3wXmyN48tTBfcra56WSO
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

ratinfostealerfatalrat

behavioral1

behavioral2