Overview

overview

10

Static

static

1

URLScan

urlscan

https://github.com/J...

windows7-x64

10

Resubmissions

13-08-2023 13:43

230813-q1pqnacg82 1

13-08-2023 12:39

230813-pv3vnaec2s 8

13-08-2023 12:30

230813-ppx28aeb2v 10

03-08-2023 21:26

230803-1af1yagb76 8

03-08-2023 21:09

230803-zzwx1shc9w 8

03-08-2023 21:06

230803-zx1heshc8z 1

03-08-2023 12:27

230803-pmqkcsdb83 10

03-08-2023 12:22

230803-pjznvsed3y 10

01-08-2023 14:17

230801-rlneqahd3s 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://github.com/JumperYT-official/njRAT-Platinum-Edition-RuS

  • Sample

    230803-pmqkcsdb83

Score
10/10
dcratinfostealerrat

Malware Config

Targets

    • Target

      https://github.com/JumperYT-official/njRAT-Platinum-Edition-RuS

    Score
    10/10
    dcratinfostealerrat

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • DCRat payload

      Detects payload of DCRat, commonly dropped by NSIS installers.

      rat
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks