General
-
Target
3f8606bce658c19e5d61a5a4aefddccba815ea5c6e89b60eb46a1e2e236148c7
-
Size
1.3MB
-
Sample
221031-12ebesdef5
-
MD5
68cf6b3e028e51e52d6529e1158bdd68
-
SHA1
0018689ead49faec9fa9289d66e2671e7e891e0c
-
SHA256
3f8606bce658c19e5d61a5a4aefddccba815ea5c6e89b60eb46a1e2e236148c7
-
SHA512
5028b7eae1a7eb8b85e717f06f27f508c00f1751e58a901bfd18d2440c53883691bea1e39c61f4d5c24530bf288f3cc4e48a199ae5c30042e6c3c9cef8814391
-
SSDEEP
24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg
Behavioral task
behavioral1
Sample
3f8606bce658c19e5d61a5a4aefddccba815ea5c6e89b60eb46a1e2e236148c7.exe
Resource
win10-20220812-en
Malware Config
Targets
-
-
Target
3f8606bce658c19e5d61a5a4aefddccba815ea5c6e89b60eb46a1e2e236148c7
-
Size
1.3MB
-
MD5
68cf6b3e028e51e52d6529e1158bdd68
-
SHA1
0018689ead49faec9fa9289d66e2671e7e891e0c
-
SHA256
3f8606bce658c19e5d61a5a4aefddccba815ea5c6e89b60eb46a1e2e236148c7
-
SHA512
5028b7eae1a7eb8b85e717f06f27f508c00f1751e58a901bfd18d2440c53883691bea1e39c61f4d5c24530bf288f3cc4e48a199ae5c30042e6c3c9cef8814391
-
SSDEEP
24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg
Score10/10-
DcRat
DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-