Overview
overview
10Static
static
10DarkTrack+...px.exe
windows10-2004-x64
7DarkTrack+...ta.exe
windows10-2004-x64
1DarkTrack+...er.exe
windows10-2004-x64
1DarkTrack+...eg.exe
windows10-2004-x64
1DarkTrack+...e3.dll
windows10-2004-x64
7out.dll
windows10-2004-x64
3DarkTrack+...e3.dll
windows10-2004-x64
3DarkTrack+...er.dll
windows10-2004-x64
7out.dll
windows10-2004-x64
3DarkTrack+...ub.exe
windows10-2004-x64
10Analysis
-
max time kernel
154s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
07-04-2023 12:31
Behavioral task
behavioral1
Sample
DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Compressors/upx.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral2
Sample
DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Darktrack 4.1 Beta.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Mescaline File Binder/Mescaline Multi File Binder.exe
Resource
win10v2004-20230221-en
Behavioral task
behavioral4
Sample
DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Modules/ffmpeg.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Plugins/sqlite3.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
out.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
DarkTrack+Alien+4.1/DarkTrack Alien 4.1/sqlite3.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral8
Sample
DarkTrack+Alien+4.1/DarkTrack Alien 4.1/sqlite3Reader.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
out.dll
Resource
win10v2004-20230220-en
General
-
Target
DarkTrack+Alien+4.1/DarkTrack Alien 4.1/stub/stub.exe
-
Size
627KB
-
MD5
edc9c0a3eaaf592dba89ec3735ef022b
-
SHA1
4c1196733e6bafa0b7d3e078896d0937111a9440
-
SHA256
98fb43736370f72edda152a0c6e5edeab4ffcd9e1c5b4da932b63e0b786c4161
-
SHA512
4f1bbaff8d4a046cbde6dc82ff4c0b2adcb7604417b0498cc234f7aa1d28fe73545d69605ae64ab51404687ea5b4bbe88f037a867f1171cfcfd18f5e511752ef
-
SSDEEP
12288:BOqvQomCg4G6q90tmPvj+GU/ttJuqwh3EQiXRUVZs4ixsiNhkApRaw:9oovgbAKvBgtJuqwh3EQihUb1ifNh
Malware Config
Signatures
-
DarkTrack payload 1 IoCs
Processes:
resource yara_rule behavioral10/memory/636-133-0x0000000000400000-0x00000000004A8000-memory.dmp family_darktrack -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
stub.exepid process 636 stub.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/636-133-0x0000000000400000-0x00000000004A8000-memory.dmpFilesize
672KB