Overview

overview

10

Static

static

c1b1b337c3...55.exe

windows7_x64

10

c1b1b337c3...55.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c1b1b337c38d525e3430e3c1e90ae355.exe

  • Size

    416KB

  • Sample

    210703-346be23vhs

  • MD5

    c1b1b337c38d525e3430e3c1e90ae355

  • SHA1

    93095f8cb0d9c047eaaa28441174824e0a60f69d

  • SHA256

    549294145687d56bced5ae786f90fd4ec2aa4730e80f31f3b886e3a603f1e47e

  • SHA512

    7ba20b2ac63f87a0c25d5edb61425a16040c65b0fe2cfa21e654f5a4bec070d1525b47c217afe713fec85d435c7292f48e85924e28585553a400610fa186c980

Score
10/10
darkvncrat

Malware Config

Targets

    • Target

      c1b1b337c38d525e3430e3c1e90ae355.exe

    • Size

      416KB

    • MD5

      c1b1b337c38d525e3430e3c1e90ae355

    • SHA1

      93095f8cb0d9c047eaaa28441174824e0a60f69d

    • SHA256

      549294145687d56bced5ae786f90fd4ec2aa4730e80f31f3b886e3a603f1e47e

    • SHA512

      7ba20b2ac63f87a0c25d5edb61425a16040c65b0fe2cfa21e654f5a4bec070d1525b47c217afe713fec85d435c7292f48e85924e28585553a400610fa186c980

    Score
    10/10
    darkvncrat

    • DarkVNC

      DarkVNC is a malicious version of the famous VNC software.

      ratdarkvnc

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • DarkVNC Payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks