f138fdf8a37348b23095aa37f9ca819061c9336615f347f026f5b747861671b8

General
Target

f138fdf8a37348b23095aa37f9ca819061c9336615f347f026f5b747861671b8

Size

1MB

Sample

210228-gnq4r12rle

Score
10 /10
MD5

b8d7e501db694d31599c44c2a11ec36b

SHA1

336aaf0207e6be6826f0e2ca7c7d5198d2619275

SHA256

f138fdf8a37348b23095aa37f9ca819061c9336615f347f026f5b747861671b8

SHA512

a3ff521b6e2f53f4ea72d5d15fe1c3a982fbf904de730b81120444d8c6bea5d58f1fe9669c90fe8e82e25ad0e38d810b900cdd5fe006e9d7acfd7889cf49e5c3

Malware Config
Targets
Target

f138fdf8a37348b23095aa37f9ca819061c9336615f347f026f5b747861671b8

MD5

b8d7e501db694d31599c44c2a11ec36b

Filesize

1MB

Score
10 /10
SHA1

336aaf0207e6be6826f0e2ca7c7d5198d2619275

SHA256

f138fdf8a37348b23095aa37f9ca819061c9336615f347f026f5b747861671b8

SHA512

a3ff521b6e2f53f4ea72d5d15fe1c3a982fbf904de730b81120444d8c6bea5d58f1fe9669c90fe8e82e25ad0e38d810b900cdd5fe006e9d7acfd7889cf49e5c3

Tags

Signatures

  • DarkTrack

    Description

    DarkTrack is a remote administration tool written in delphi.

    Tags

  • DarkTrack Payload

  • Suspicious use of SetThreadContext

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10

                          behavioral2

                          10/10