General

  • Target

    250307-n6gwws1d9z_pw_infected.zip

  • Size

    84KB

  • MD5

    32a37ed459d3eccad488241ecd063347

  • SHA1

    667f2a706080662e475301eef79059a613a4bc17

  • SHA256

    d944f5d0ed2b766184cc949a70e1e8bdc80b53b165165ebeffefb47b0cb813c1

  • SHA512

    916b326b77b74c1979dbab46ab6f789e4ec8a38c7a67893deeaa895acc6880eba8d33129584511ee982d4f185b2916986c6258ba261dfee53320e9da833c4c32

  • SSDEEP

    1536:9T2/hyNl/nqX6To1PNRPPS0BRodxkajPQKDo2wYmMcizyr17QD+PhIrZd6EFn:9i/hOpnNodNRPPS0vodxkwfDo/fOyBkJ

Malware Config

Signatures

  • Fatal Rat payload 1 IoCs
  • Fatalrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 250307-n6gwws1d9z_pw_infected.zip
    .zip

    Password: infected

  • 07272a51d1f6a7be8c45cc097bf821267d258eb2378d32c95c4601cd000366c9
    .dll windows:4 windows x86 arch:x86

    e2a7eb0ebc4ee990a5aaa2d798395f22


    Headers

    Imports

    Exports

    Sections