71d441f9725ee7a1e158a85e037e2311875f19ad12729900dba14c3ded8c5166

General
Target

71d441f9725ee7a1e158a85e037e2311875f19ad12729900dba14c3ded8c5166

Size

627KB

Sample

210228-gg2156g8fe

Score
10 /10
MD5

70b5ca289fa630db5715f047212a5403

SHA1

e6e4d63c0be8cbad0517c4ae1a56b1beefac5980

SHA256

71d441f9725ee7a1e158a85e037e2311875f19ad12729900dba14c3ded8c5166

SHA512

e347f690dd54bb48e63a12ba8c63fd7617eafa9b03aea73a4ab107cca3838723bf38a0d3ed36a2e43d3ae6876f26ffd3f27230220fab430f389c90bb2a0aff84

Malware Config
Targets
Target

71d441f9725ee7a1e158a85e037e2311875f19ad12729900dba14c3ded8c5166

MD5

70b5ca289fa630db5715f047212a5403

Filesize

627KB

Score
10 /10
SHA1

e6e4d63c0be8cbad0517c4ae1a56b1beefac5980

SHA256

71d441f9725ee7a1e158a85e037e2311875f19ad12729900dba14c3ded8c5166

SHA512

e347f690dd54bb48e63a12ba8c63fd7617eafa9b03aea73a4ab107cca3838723bf38a0d3ed36a2e43d3ae6876f26ffd3f27230220fab430f389c90bb2a0aff84

Tags

Signatures

  • DarkTrack

    Description

    DarkTrack is a remote administration tool written in delphi.

    Tags

  • DarkTrack Payload

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    Tags

    TTPs

    Registry Run Keys / Startup Folder Modify Registry

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
        Execution
          Exfiltration
            Impact
              Initial Access
                Lateral Movement
                  Privilege Escalation
                    Tasks

                    static1

                    10/10

                    behavioral1

                    10/10

                    behavioral2

                    10/10