Overview

overview

10

Static

static

88cabbf430...27.exe

windows7_x64

10

88cabbf430...27.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    88cabbf4309f6b749bc21ebd4e780d445ae427014413db0c5b752e734cfca427

  • Size

    759KB

  • Sample

    210228-j63dn4zxnj

  • MD5

    bddd8db7b2653b2282eef20419a63042

  • SHA1

    e9c7576c0329d48b1803f87af64b5f71f7fe7143

  • SHA256

    88cabbf4309f6b749bc21ebd4e780d445ae427014413db0c5b752e734cfca427

  • SHA512

    3396e51b338848893e269f224c4e9ab743acc30c8fad821d541dcd6af0639b75a8eeacc76c5ace7f528ec4a658a92613b4fd2b1edf5b2302b511669532df741b

Score
10/10
darktrackratstealer

Malware Config

Targets

    • Target

      88cabbf4309f6b749bc21ebd4e780d445ae427014413db0c5b752e734cfca427

    • Size

      759KB

    • MD5

      bddd8db7b2653b2282eef20419a63042

    • SHA1

      e9c7576c0329d48b1803f87af64b5f71f7fe7143

    • SHA256

      88cabbf4309f6b749bc21ebd4e780d445ae427014413db0c5b752e734cfca427

    • SHA512

      3396e51b338848893e269f224c4e9ab743acc30c8fad821d541dcd6af0639b75a8eeacc76c5ace7f528ec4a658a92613b4fd2b1edf5b2302b511669532df741b

    Score
    10/10
    darktrackratstealer

    • DarkTrack

      DarkTrack is a remote administration tool written in delphi.

      ratstealerdarktrack

    • DarkTrack Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks