Overview

overview

10

Static

static

10

DarkTrack+...px.exe

windows10-2004-x64

7

DarkTrack+...ta.exe

windows10-2004-x64

1

DarkTrack+...er.exe

windows10-2004-x64

1

DarkTrack+...eg.exe

windows10-2004-x64

1

DarkTrack+...e3.dll

windows10-2004-x64

7

out.dll

windows10-2004-x64

3

DarkTrack+...e3.dll

windows10-2004-x64

3

DarkTrack+...er.dll

windows10-2004-x64

7

out.dll

windows10-2004-x64

3

DarkTrack+...ub.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DarkTrack+Alien+4.1 Legit Copy.rar

  • Size

    15.0MB

  • MD5

    c78d6a161e2a466504e41fd9fa1e74d9

  • SHA1

    a2af9b7f5475778db98137fa321ac9f7aee20006

  • SHA256

    d2f024ad19b8ada353f6459d3ac54529b045d4fadab880fcaa0813f4bfd617bc

  • SHA512

    7fd3406cecfde7c9c5ab923b6fd160d13090e9daaa3bad1f81511b8a7c55645ed9d321de46b270eb3fb400680540175f71a53e722896d7bdf3493bf2ffe6ebb5

  • SSDEEP

    196608:nt/c82nIXAVWh2dRGHFvYB40OQOqOiVvCl1Deq14Gqb/A4/QDp8ixMjPgOnkKH1i:nTKIc2hlvE4wuiVvCDeq9P4ILler0

Score
10/10
upxaspackv2darktrack

Malware Config

Signatures

  • DarkTrack payload 1 IoCs
  • Darktrack family
    darktrack
  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • DarkTrack+Alien+4.1 Legit Copy.rar
    .rar

    Password: darktrack

  • DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Compressors/upx.exe
    .exe windows x86


    Headers

    Sections

  • DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Darktrack 4.1 Beta.exe
    .exe windows x86

    Password: darktrack


    Headers

    Sections

  • DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Data/DataBase.db
  • DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Mescaline File Binder/Mescaline Multi File Binder.exe
    .exe windows x86

    Password: darktrack


    Headers

    Sections

  • DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Modules/ffmpeg.exe
    .exe windows x86

    Password: darktrack

    a05575a4ef06bc557b834a488509da27


    Headers

    Imports

    Sections

  • DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Plugins/sqlite3.dll
    .dll windows x86

    Password: darktrack


    Headers

    Exports

    Sections

  • out.upx
    .dll windows x86


    Headers

    Sections

  • DarkTrack+Alien+4.1/DarkTrack Alien 4.1/settings.ini
  • DarkTrack+Alien+4.1/DarkTrack Alien 4.1/sqlite3.dll
    .dll windows x86

    Password: darktrack

    40512658f087f2990d621c454c392124


    Headers

    Imports

    Exports

    Sections

  • DarkTrack+Alien+4.1/DarkTrack Alien 4.1/sqlite3Reader.dll
    .dll windows x86

    Password: darktrack


    Headers

    Exports

    Sections

  • out.upx
    .dll windows x86


    Headers

    Sections

  • DarkTrack+Alien+4.1/DarkTrack Alien 4.1/stub/stub.exe
    .exe windows x86

    Password: darktrack

    ee46edf42cfbc2785a30bfb17f6da9c2


    Headers

    Imports

    Sections