Overview

overview

10

Static

static

10

395d65f4b3...56.exe

windows7-x64

10

395d65f4b3...56.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    395d65f4b35591f0505f24aae432c82f802f095ddc1a1b279f29066d0cb9fc56

  • Size

    2.0MB

  • Sample

    230111-payp7sca26

  • MD5

    43c3a083ad45c159332bd1f5978b86c9

  • SHA1

    b53004cd9daabc1ddb78ece54f678b8e5d0a48a1

  • SHA256

    395d65f4b35591f0505f24aae432c82f802f095ddc1a1b279f29066d0cb9fc56

  • SHA512

    cce0b15e71cc2b050a3578f6e9c1ca7d9973fed491bd55b37451195e0c227188ec47300ed6c91c8b1f80363d2993985e621a686a24948d38de6965d1b06f8086

  • SSDEEP

    49152:dndSiKG7Idc6Rm8sDJMSgkdEiVTpnjyv:dhURm8vSFVov

Score
10/10
dcratinfostealerrat

Malware Config

Targets

    • Target

      395d65f4b35591f0505f24aae432c82f802f095ddc1a1b279f29066d0cb9fc56

    • Size

      2.0MB

    • MD5

      43c3a083ad45c159332bd1f5978b86c9

    • SHA1

      b53004cd9daabc1ddb78ece54f678b8e5d0a48a1

    • SHA256

      395d65f4b35591f0505f24aae432c82f802f095ddc1a1b279f29066d0cb9fc56

    • SHA512

      cce0b15e71cc2b050a3578f6e9c1ca7d9973fed491bd55b37451195e0c227188ec47300ed6c91c8b1f80363d2993985e621a686a24948d38de6965d1b06f8086

    • SSDEEP

      49152:dndSiKG7Idc6Rm8sDJMSgkdEiVTpnjyv:dhURm8vSFVov

    Score
    10/10
    dcratinfostealerrat

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • DCRat payload

      Detects payload of DCRat, commonly dropped by NSIS installers.

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks