Overview

overview

10

Static

static

10

LoaderB.exe

windows7-x64

10

LoaderB.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LoaderB.exe

  • Size

    1.1MB

  • Sample

    230121-xqb55sfc41

  • MD5

    97fd39727f09d456c6e6e8a3fb9b4028

  • SHA1

    f27399f10573bb39ebc472b7fdfa649e48494dfd

  • SHA256

    29b84cbec0c92620955afd16358fb786df50fdc6dc024399cc9d2f5d8f40f38a

  • SHA512

    275a115ce4bb2662658a6d6ad77a3a83005d66d9d773726581ead4f38bf45b9e6c5d98501cfc0ec3c2623b04635856ca303ee89c7ec114ab01268741928f9a46

  • SSDEEP

    24576:qGlFYoq77FED1/LTeXGVFkz/EaQON6uZvRbXiPoUg:HFf+6DNiwaT08XiPoUg

Score
10/10
dcratinfostealerrat

Malware Config

Targets

    • Target

      LoaderB.exe

    • Size

      1.1MB

    • MD5

      97fd39727f09d456c6e6e8a3fb9b4028

    • SHA1

      f27399f10573bb39ebc472b7fdfa649e48494dfd

    • SHA256

      29b84cbec0c92620955afd16358fb786df50fdc6dc024399cc9d2f5d8f40f38a

    • SHA512

      275a115ce4bb2662658a6d6ad77a3a83005d66d9d773726581ead4f38bf45b9e6c5d98501cfc0ec3c2623b04635856ca303ee89c7ec114ab01268741928f9a46

    • SSDEEP

      24576:qGlFYoq77FED1/LTeXGVFkz/EaQON6uZvRbXiPoUg:HFf+6DNiwaT08XiPoUg

    Score
    10/10
    dcratinfostealerrat

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • DCRat payload

      Detects payload of DCRat, commonly dropped by NSIS installers.

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks