General

  • Target

    SecuriteInfo.com.Win32.RATX-gen.24734.17790.exe

  • Size

    12.2MB

  • Sample

    230630-xd5lxsfd2v

  • MD5

    450d8900f699a7730d0219ab789fc7b2

  • SHA1

    713a63d0321c51b0c91347d407ece92d8800c0aa

  • SHA256

    383e4ef893f9e4a573ba5ff801d150f2d401e7badb2d18ba47698991eb3750b1

  • SHA512

    82f2046e059923c3c1be7e82af6947b7b62c5056ae60e15675103dbd911ee9b703f0537e863f782251df7ed8a1ce2d10db173055341ae8e945a4b846df7c8418

  • SSDEEP

    196608:7zLA8rc2nh3bgz/KjFmRJKxwYfzBaHIGWtqfuNLPRt7WNGV/5BJOy9k0YNiE3lgq:3Lz5UTKuJKxk9WtUMXVVjYym0Yke

Score
10/10

Malware Config

Targets

    • Target

      SecuriteInfo.com.Win32.RATX-gen.24734.17790.exe

    • Size

      12.2MB

    • MD5

      450d8900f699a7730d0219ab789fc7b2

    • SHA1

      713a63d0321c51b0c91347d407ece92d8800c0aa

    • SHA256

      383e4ef893f9e4a573ba5ff801d150f2d401e7badb2d18ba47698991eb3750b1

    • SHA512

      82f2046e059923c3c1be7e82af6947b7b62c5056ae60e15675103dbd911ee9b703f0537e863f782251df7ed8a1ce2d10db173055341ae8e945a4b846df7c8418

    • SSDEEP

      196608:7zLA8rc2nh3bgz/KjFmRJKxwYfzBaHIGWtqfuNLPRt7WNGV/5BJOy9k0YNiE3lgq:3Lz5UTKuJKxk9WtUMXVVjYym0Yke

    Score
    10/10
    • DarkVNC

      DarkVNC is a malicious version of the famous VNC software.

    • DarkVNC payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks