Overview

overview

10

Static

static

17a9661401...6e.exe

windows7_x64

10

17a9661401...6e.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17a966140133ecf3bb64d16d19ab6e6e.exe

  • Size

    417KB

  • Sample

    210702-bc31jpg3hj

  • MD5

    17a966140133ecf3bb64d16d19ab6e6e

  • SHA1

    bd5c17cd47c677c6d579279befeb1383df8acbc8

  • SHA256

    e1eceb18a899ae4d5ba7080c8e1bc43f11d05a5998e3a6bd41100a23cbc2137a

  • SHA512

    26d0775db7f41d5548d5e5536801c83c3377abcbfde73aaae39691c6d89a735a43357a6c149c44a17063d465949d3721a2ed8c68213c6a4b5ea0e35ed19b86c2

Score
10/10
darkvncrat

Malware Config

Targets

    • Target

      17a966140133ecf3bb64d16d19ab6e6e.exe

    • Size

      417KB

    • MD5

      17a966140133ecf3bb64d16d19ab6e6e

    • SHA1

      bd5c17cd47c677c6d579279befeb1383df8acbc8

    • SHA256

      e1eceb18a899ae4d5ba7080c8e1bc43f11d05a5998e3a6bd41100a23cbc2137a

    • SHA512

      26d0775db7f41d5548d5e5536801c83c3377abcbfde73aaae39691c6d89a735a43357a6c149c44a17063d465949d3721a2ed8c68213c6a4b5ea0e35ed19b86c2

    Score
    10/10
    darkvncrat

    • DarkVNC

      DarkVNC is a malicious version of the famous VNC software.

      ratdarkvnc

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • DarkVNC Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks