Analysis
-
max time kernel
91s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16/04/2023, 13:34
General
-
Target
DcRat/Plugins/Keylogger.exe
-
Size
10KB
-
MD5
bb705e1212af49881a31f2de2bc48653
-
SHA1
a9728d5a995b163d6d4c590b3d79836b469806f7
-
SHA256
85c1c0070b0bbe577cce521a39a4943e97120957fb5b69b0c0b913bbdc7f2f8c
-
SHA512
9526b5279478e01c37ed001cd7bc69a3583cc5ce4a7c9ac0e404a1d8b554878513abe3c282eda81f8c524bbbbe84e7ec66ecee22ca62e88dc8962aed58662aed
-
SSDEEP
192:Htmcuq6MYDxi4maEYbRzmEsLkTgv5JHTUeJYHcwY7fazJFEi:HtlF6MWE9rUhVsL15pUrYyVFE
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DcRat\Plugins\Keylogger.exe"C:\Users\Admin\AppData\Local\Temp\DcRat\Plugins\Keylogger.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
64KB
-
Filesize
64KB