General
-
Target
6ab502214306d67315c97f8332e381895b3b1283da3fb0c0169f3c4e1e8a426c
-
Size
1.3MB
-
Sample
221031-2x541sdhh5
-
MD5
18fc1884afec2b329024ffb0880e50e7
-
SHA1
83e653a34e2f9b1276ed7286b7f9610e0b3779ae
-
SHA256
6ab502214306d67315c97f8332e381895b3b1283da3fb0c0169f3c4e1e8a426c
-
SHA512
61883463b929bd892a8e7b80e43b0b161ec5f6fb42755e9161a85ade0d6716e2eb6654d1686de5c2d68419515107c056fe4e030f8092c2407dbebbc43d65dd16
-
SSDEEP
24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg
Behavioral task
behavioral1
Sample
6ab502214306d67315c97f8332e381895b3b1283da3fb0c0169f3c4e1e8a426c.exe
Resource
win10-20220812-en
Malware Config
Targets
-
-
Target
6ab502214306d67315c97f8332e381895b3b1283da3fb0c0169f3c4e1e8a426c
-
Size
1.3MB
-
MD5
18fc1884afec2b329024ffb0880e50e7
-
SHA1
83e653a34e2f9b1276ed7286b7f9610e0b3779ae
-
SHA256
6ab502214306d67315c97f8332e381895b3b1283da3fb0c0169f3c4e1e8a426c
-
SHA512
61883463b929bd892a8e7b80e43b0b161ec5f6fb42755e9161a85ade0d6716e2eb6654d1686de5c2d68419515107c056fe4e030f8092c2407dbebbc43d65dd16
-
SSDEEP
24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg
Score10/10-
DcRat
DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-