fatalrat | dabaa5e5e4aa37dcd71005f5922fe29ff47340d8ae2104df94f592a664d176be | Triage™

Login
Reports

Overview

overview

Static

static

3

高-颜-�...��.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
高-颜-御-姐-主-播-露-脸-定-制-福-利.exe
Size 312KB
Sample260126-tfxgjsgx2b
SHA256 dabaa5e5e4aa37dcd71005f5922fe29ff47340d8ae2104df94f592a664d176be
MD5 e6f60cb83c4ca609772b3eaf73cc31f4
SHA1 74002d51429437edc0ae5921a9220c6ccc645641
SHA512 972109f277ef165bbc0d6b504be753918d791447d4750ec40c70c72a187c9aec9dfe33c85c0f0f06a0365f3054556939bb337af8153ee4ad3e9412c152db6e06
SSDEEP 3072:wewWOrJ5kXbZ1nFg1SpHq/s8RV4CYh1Ge5BV0D1daQP/luEU9/rv37BO8y8YJPpp:lwpYye5v0mJv3GPp9Hfoe5v0PqWCCP
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

fatalrat discovery execution infostealer persistence rat stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

高-颜-御-姐-主-播-露-脸-定-制-福-利.exe

Resource

win11-20251231-en

windows11-21h2-x64

10 signatures

150 seconds

discovery execution fatalrat infostealer persistence rat stealer trojan

Malware Config

Targets

- Target
  高-颜-御-姐-主-播-露-脸-定-制-福-利.exe
- Size 312KB
- SHA256 dabaa5e5e4aa37dcd71005f5922fe29ff47340d8ae2104df94f592a664d176be
- MD5 e6f60cb83c4ca609772b3eaf73cc31f4
- SHA1 74002d51429437edc0ae5921a9220c6ccc645641
- SHA512 972109f277ef165bbc0d6b504be753918d791447d4750ec40c70c72a187c9aec9dfe33c85c0f0f06a0365f3054556939bb337af8153ee4ad3e9412c152db6e06
- SSDEEP 3072:wewWOrJ5kXbZ1nFg1SpHq/s8RV4CYh1Ge5BV0D1daQP/luEU9/rv37BO8y8YJPpp:lwpYye5v0mJv3GPp9Hfoe5v0PqWCCP
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

discovery execution fatalrat infostealer persistence rat stealer trojan
- Fatal Rat payload
  rat infostealer
- FatalRat
  FatalRat is a modular infostealer family written in C++ first appearing in June 2021.
  stealer trojan fatalrat
- Fatalrat family
  fatalrat
- Adds Run key to start application
  persistence
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionfatalratinfostealerpersistenceratstealertrojan

© 2018-2026

Terms | Privacy