General
-
Target
796fb13d4ec91acabb8ea8447699850ddbc189157e3a9a91c0477a5b83c72012
-
Size
1.3MB
-
Sample
221101-nn5j8scddr
-
MD5
76f57cdae6224f6d655996f2953535b5
-
SHA1
30feb1edd193e937514586430b792b508eac1a0c
-
SHA256
796fb13d4ec91acabb8ea8447699850ddbc189157e3a9a91c0477a5b83c72012
-
SHA512
fe5eb19e3b84a78a8a198e075d4858f986302d9e1b13ca32285ec3b5b751ce6201e4e22ae2d657c435020ac261fbc69424099f7f0d7aba83ffbb88df0eb687fd
-
SSDEEP
24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg
Behavioral task
behavioral1
Sample
796fb13d4ec91acabb8ea8447699850ddbc189157e3a9a91c0477a5b83c72012.exe
Resource
win10-20220812-en
Malware Config
Targets
-
-
Target
796fb13d4ec91acabb8ea8447699850ddbc189157e3a9a91c0477a5b83c72012
-
Size
1.3MB
-
MD5
76f57cdae6224f6d655996f2953535b5
-
SHA1
30feb1edd193e937514586430b792b508eac1a0c
-
SHA256
796fb13d4ec91acabb8ea8447699850ddbc189157e3a9a91c0477a5b83c72012
-
SHA512
fe5eb19e3b84a78a8a198e075d4858f986302d9e1b13ca32285ec3b5b751ce6201e4e22ae2d657c435020ac261fbc69424099f7f0d7aba83ffbb88df0eb687fd
-
SSDEEP
24576:U2G/nvxW3Ww0t6TnzGmVBDh4+aknuRRZJND0gFJ4rD/IjC:UbA30GnzV/q+DnsXg
Score10/10-
DcRat
DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-