Overview

overview

10

Static

static

f138fdf8a3...b8.exe

windows7_x64

10

f138fdf8a3...b8.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f138fdf8a37348b23095aa37f9ca819061c9336615f347f026f5b747861671b8

  • Size

    1.8MB

  • Sample

    210228-gnq4r12rle

  • MD5

    b8d7e501db694d31599c44c2a11ec36b

  • SHA1

    336aaf0207e6be6826f0e2ca7c7d5198d2619275

  • SHA256

    f138fdf8a37348b23095aa37f9ca819061c9336615f347f026f5b747861671b8

  • SHA512

    a3ff521b6e2f53f4ea72d5d15fe1c3a982fbf904de730b81120444d8c6bea5d58f1fe9669c90fe8e82e25ad0e38d810b900cdd5fe006e9d7acfd7889cf49e5c3

Score
10/10
darktrackratstealer

Malware Config

Targets

    • Target

      f138fdf8a37348b23095aa37f9ca819061c9336615f347f026f5b747861671b8

    • Size

      1.8MB

    • MD5

      b8d7e501db694d31599c44c2a11ec36b

    • SHA1

      336aaf0207e6be6826f0e2ca7c7d5198d2619275

    • SHA256

      f138fdf8a37348b23095aa37f9ca819061c9336615f347f026f5b747861671b8

    • SHA512

      a3ff521b6e2f53f4ea72d5d15fe1c3a982fbf904de730b81120444d8c6bea5d58f1fe9669c90fe8e82e25ad0e38d810b900cdd5fe006e9d7acfd7889cf49e5c3

    Score
    10/10
    darktrackratstealer

    • DarkTrack

      DarkTrack is a remote administration tool written in delphi.

      ratstealerdarktrack

    • DarkTrack Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks