General

  • Target

    250307-n6gwws1d9y_pw_infected.zip

  • Size

    81KB

  • MD5

    7cc031524eccadace10cd359d02d308b

  • SHA1

    069dcfbfb82f7293ce4e07f125d6d1f6a041d58a

  • SHA256

    1ddc66fb7132e9eb18083c041f9b1c77382c625b8d61b30864f4b06c86dc60be

  • SHA512

    8cbbd3f02b33e8c2ff7aae842aa5b4c69dfff2d1c5fb14ee04b6a8525566299ceeeab313ade0f54625ad7bb1e74ff7cdb37114f3078559b62c7251716907f994

  • SSDEEP

    1536:RYKvqq+0EiJCNlHjqOmouBNClDJhKmOsrOEq0jW6Eoj/zQiifyPebM6:5N+3iCNdjWjY1hZSO3O

Malware Config

Signatures

  • Fatal Rat payload 1 IoCs
  • Fatalrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 250307-n6gwws1d9y_pw_infected.zip
    .zip

    Password: infected

  • 666981117291cc823e3f34a02f7af4fb3d31507f2a57c3d34391b05cdfcab020
    .dll windows:4 windows x86 arch:x86

    e2a7eb0ebc4ee990a5aaa2d798395f22


    Headers

    Imports

    Exports

    Sections