Overview

overview

10

Static

static

10

libcrypto.exe

windows7-x64

10

libcrypto.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    libcrypto.exe

  • Size

    317KB

  • Sample

    230130-cneg9seh7y

  • MD5

    61ee39f5537e65720ec629a593809c02

  • SHA1

    a3ce1a9970fdb69c5f4bde0ffa49ca4cbd0c69bd

  • SHA256

    8bed0227175fdad5e7f3c17003af481764230711f774b10af6b55d1ab58b25ec

  • SHA512

    2e3c1ae897060820b0d5734c2c74740c22f4d45426fd51917a37cef652917ad12efdda7f3f9352e983f6f029a0d739317630928b82f247d1bbb00685ce97f284

  • SSDEEP

    6144:H3yyN3U5XMNNWmfb7DyiUwCyJvjmk65mLRFe+i5SHbrVwCqy:HnNE5XM/j7DFJvAmLRFQ5S/R

Score
10/10
dcratinfostealerrat

Malware Config

Targets

    • Target

      libcrypto.exe

    • Size

      317KB

    • MD5

      61ee39f5537e65720ec629a593809c02

    • SHA1

      a3ce1a9970fdb69c5f4bde0ffa49ca4cbd0c69bd

    • SHA256

      8bed0227175fdad5e7f3c17003af481764230711f774b10af6b55d1ab58b25ec

    • SHA512

      2e3c1ae897060820b0d5734c2c74740c22f4d45426fd51917a37cef652917ad12efdda7f3f9352e983f6f029a0d739317630928b82f247d1bbb00685ce97f284

    • SSDEEP

      6144:H3yyN3U5XMNNWmfb7DyiUwCyJvjmk65mLRFe+i5SHbrVwCqy:HnNE5XM/j7DFJvAmLRFQ5S/R

    Score
    10/10
    dcratinfostealerrat

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • DCRat payload

      Detects payload of DCRat, commonly dropped by NSIS installers.

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks