General
-
Target
f8ac74134a42879ce5bf05f87bb3d7b628c0a6a3bb0722214467e804bfd249d7
-
Size
1.3MB
-
Sample
221101-nmb7ascdcl
-
MD5
51ecc3bdf959e04a1a84a207e4e2af7c
-
SHA1
b4665e2d0cc69fcfd651273f7c8b8a259ecce891
-
SHA256
f8ac74134a42879ce5bf05f87bb3d7b628c0a6a3bb0722214467e804bfd249d7
-
SHA512
8077583c2df335a706f22193aedc1d5617e54ae43120bee01538e9213db6502221fef5f88232c0931cc921965770689be6d148882f467e4d2848d34498c9df0f
-
SSDEEP
24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg
Behavioral task
behavioral1
Sample
f8ac74134a42879ce5bf05f87bb3d7b628c0a6a3bb0722214467e804bfd249d7.exe
Resource
win10-20220812-en
Malware Config
Targets
-
-
Target
f8ac74134a42879ce5bf05f87bb3d7b628c0a6a3bb0722214467e804bfd249d7
-
Size
1.3MB
-
MD5
51ecc3bdf959e04a1a84a207e4e2af7c
-
SHA1
b4665e2d0cc69fcfd651273f7c8b8a259ecce891
-
SHA256
f8ac74134a42879ce5bf05f87bb3d7b628c0a6a3bb0722214467e804bfd249d7
-
SHA512
8077583c2df335a706f22193aedc1d5617e54ae43120bee01538e9213db6502221fef5f88232c0931cc921965770689be6d148882f467e4d2848d34498c9df0f
-
SSDEEP
24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg
Score10/10-
DcRat
DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-