General
-
Target
bd0bba0be4007fcefc985a6e3af59066337d89cd77c474b1762a8346e12f7ef9
-
Size
1.3MB
-
Sample
221031-2svsgseghj
-
MD5
de2b0a2ec273aa9186354c477745622a
-
SHA1
deab97d981f052d39b152720a7c20dcb0c2e0f9a
-
SHA256
bd0bba0be4007fcefc985a6e3af59066337d89cd77c474b1762a8346e12f7ef9
-
SHA512
3b10fd95807ede31eff397b014e26a2e4686a9c222e34f1e6a94efa25042462e5687eff325181077ed2e2fe3601c9f85432910863305c049b52390be538c8f64
-
SSDEEP
24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg
Behavioral task
behavioral1
Sample
bd0bba0be4007fcefc985a6e3af59066337d89cd77c474b1762a8346e12f7ef9.exe
Resource
win10-20220901-en
Malware Config
Targets
-
-
Target
bd0bba0be4007fcefc985a6e3af59066337d89cd77c474b1762a8346e12f7ef9
-
Size
1.3MB
-
MD5
de2b0a2ec273aa9186354c477745622a
-
SHA1
deab97d981f052d39b152720a7c20dcb0c2e0f9a
-
SHA256
bd0bba0be4007fcefc985a6e3af59066337d89cd77c474b1762a8346e12f7ef9
-
SHA512
3b10fd95807ede31eff397b014e26a2e4686a9c222e34f1e6a94efa25042462e5687eff325181077ed2e2fe3601c9f85432910863305c049b52390be538c8f64
-
SSDEEP
24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg
Score10/10-
DcRat
DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-