Overview

overview

10

Static

static

10

a8f5fc1fad...99.exe

windows7-x64

10

a8f5fc1fad...99.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a8f5fc1fada12db013dd13ac5e963825842d92a84472ec2073160e3a1486bf99

  • Size

    2.0MB

  • Sample

    230207-rcnzwsca58

  • MD5

    8f6ffa5ae56fd12b4c7e7e7ad6cf6122

  • SHA1

    2d43ec8122adffcdab6a95dcfb79dd13ec0f9d67

  • SHA256

    a8f5fc1fada12db013dd13ac5e963825842d92a84472ec2073160e3a1486bf99

  • SHA512

    833c68e82a12caa2969c0050a1887c32a381837a92e31cbfc967d1217a22fc654084de9e9882395737c4940f2a0c6487e6a74de53af97d5247bb73f82bef27e6

  • SSDEEP

    49152:dndSiKG7Idc6Rm8sDJMSgkdEiVTpnjyv:dhURm8vSFVov

Score
10/10
dcratinfostealerrat

Malware Config

Targets

    • Target

      a8f5fc1fada12db013dd13ac5e963825842d92a84472ec2073160e3a1486bf99

    • Size

      2.0MB

    • MD5

      8f6ffa5ae56fd12b4c7e7e7ad6cf6122

    • SHA1

      2d43ec8122adffcdab6a95dcfb79dd13ec0f9d67

    • SHA256

      a8f5fc1fada12db013dd13ac5e963825842d92a84472ec2073160e3a1486bf99

    • SHA512

      833c68e82a12caa2969c0050a1887c32a381837a92e31cbfc967d1217a22fc654084de9e9882395737c4940f2a0c6487e6a74de53af97d5247bb73f82bef27e6

    • SSDEEP

      49152:dndSiKG7Idc6Rm8sDJMSgkdEiVTpnjyv:dhURm8vSFVov

    Score
    10/10
    dcratinfostealerrat

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • DCRat payload

      Detects payload of DCRat, commonly dropped by NSIS installers.

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks