General

  • Target

    2960-56-0x00000000018C0000-0x00000000018E9000-memory.dmp

  • Size

    164KB

  • MD5

    7b8ef050134f72fe20d8a311966cf0a3

  • SHA1

    66c5756909cec3a0dbdfa66ccbde7c463d764211

  • SHA256

    4cf044a94973f01505a78f5fe870cf4e12edb88480ea2253e8843d908a5f058b

  • SHA512

    e170f6dd427e6cda4c5869958f0e2f98b803244fca41b5c08f834640f017167a548e5f1f2fad893ab994b32b1d8df595a2d131c5ebe632ea60cdc3f4ea412cd8

  • SSDEEP

    3072:xeiv0dfC5N0MsAYLPxuNVNtc6spONowtTBfU9wcZefKr:xeOGfC5NklJuLNtc6mKtTBWwcMS

Malware Config

Signatures

  • Fatal Rat payload 1 IoCs
  • Fatalrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2960-56-0x00000000018C0000-0x00000000018E9000-memory.dmp
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections