Analysis
-
max time kernel
46s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
21-03-2023 06:03
Static task
static1
Behavioral task
behavioral1
Sample
a2da59241b1f6d898f0f32087b2684da2a38954063b2c0078a459171c27eab26.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a2da59241b1f6d898f0f32087b2684da2a38954063b2c0078a459171c27eab26.dll
Resource
win10v2004-20230220-en
General
-
Target
a2da59241b1f6d898f0f32087b2684da2a38954063b2c0078a459171c27eab26.dll
-
Size
1.1MB
-
MD5
534362e1316c41dd0637f757c7766858
-
SHA1
0377a70765062922e9b6a2363b958a2dfc8b62f7
-
SHA256
a2da59241b1f6d898f0f32087b2684da2a38954063b2c0078a459171c27eab26
-
SHA512
9cdfc9789ce8bdd8cc04e232a5f147a9cb2895ad6b1215ccb30baf407d05d6c4f21185806eb94d5383c76dc217ba0bfa4e31a276fcb64e71494e234e22706455
-
SSDEEP
24576:Cp8YKoUQYdoRRzIzUFtVAyPc0AtuwWhcyIJleW6I/OAJolYr1P:iRUrdo30wnEDlWhil5z/OMoax
Malware Config
Signatures
-
FlawedGraceRAT
FlawedGrace is a full-featured RAT written in C++.
-
resource yara_rule behavioral1/memory/2040-56-0x0000000001E60000-0x0000000001F76000-memory.dmp flawgrace_loader_x64 behavioral1/memory/2040-57-0x0000000001E60000-0x0000000001F76000-memory.dmp flawgrace_loader_x64 behavioral1/memory/2040-58-0x0000000002170000-0x0000000002286000-memory.dmp flawgrace_loader_x64 behavioral1/memory/2040-59-0x0000000001E60000-0x0000000001F76000-memory.dmp flawgrace_loader_x64 behavioral1/memory/2040-61-0x0000000001E60000-0x0000000001F76000-memory.dmp flawgrace_loader_x64 behavioral1/memory/2040-60-0x0000000002170000-0x0000000002286000-memory.dmp flawgrace_loader_x64 behavioral1/memory/2040-62-0x00000000023B0000-0x00000000024C6000-memory.dmp flawgrace_loader_x64 behavioral1/memory/2040-63-0x00000000023B0000-0x00000000024C6000-memory.dmp flawgrace_loader_x64 behavioral1/memory/2040-64-0x00000000025F0000-0x0000000002706000-memory.dmp flawgrace_loader_x64 behavioral1/memory/2040-65-0x00000000025F0000-0x0000000002706000-memory.dmp flawgrace_loader_x64