Overview
overview
10Static
static
10DCRat.exe
windows10-1703-x64
7data/7zxa.dll
windows10-1703-x64
3data/DCRAC.exe
windows10-1703-x64
1data/DCRCC.exe
windows10-1703-x64
3data/Default.exe
windows10-1703-x64
1data/NCC2.dll
windows10-1703-x64
1data/NCC3.dll
windows10-1703-x64
3data/NCCheck.dll
windows10-1703-x64
1data/Rar.exe
windows10-1703-x64
3data/RarExt.dll
windows10-1703-x64
3data/RarExt64.dll
windows10-1703-x64
3data/WinCon.exe
windows10-1703-x64
1data/Zip.exe
windows10-1703-x64
1data/dnlib.dll
windows10-1703-x64
1data/dotNE...le.exe
windows10-1703-x64
10data/dotNE...or.exe
windows10-1703-x64
10data/enc.vbe
windows10-1703-x64
1data/upx.exe
windows10-1703-x64
7data/wRar.exe
windows10-1703-x64
4lib/L1nc0In 1.jar
windows10-1703-x64
7lib/L1nc0In 10.jar
windows10-1703-x64
7lib/L1nc0In 11.jar
windows10-1703-x64
7lib/L1nc0In 12.jar
windows10-1703-x64
7lib/L1nc0In 13.jar
windows10-1703-x64
7lib/L1nc0In 14.jar
windows10-1703-x64
7lib/L1nc0In 2.jar
windows10-1703-x64
7lib/L1nc0In 3.jar
windows10-1703-x64
7lib/L1nc0In 4.jar
windows10-1703-x64
7lib/L1nc0In 5.jar
windows10-1703-x64
7lib/L1nc0In 6.jar
windows10-1703-x64
7lib/L1nc0In 7.jar
windows10-1703-x64
7plugins/Te...le.dll
windows10-1703-x64
1Analysis
-
max time kernel
119s -
max time network
134s -
platform
windows10-1703_x64 -
resource
win10-20231020-en -
resource tags
arch:x64arch:x86image:win10-20231020-enlocale:en-usos:windows10-1703-x64system -
submitted
15-11-2023 13:11
Behavioral task
behavioral1
Sample
DCRat.exe
Resource
win10-20231023-en
Behavioral task
behavioral2
Sample
data/7zxa.dll
Resource
win10-20231023-en
Behavioral task
behavioral3
Sample
data/DCRAC.exe
Resource
win10-20231020-en
Behavioral task
behavioral4
Sample
data/DCRCC.exe
Resource
win10-20231023-en
Behavioral task
behavioral5
Sample
data/Default.exe
Resource
win10-20231023-en
Behavioral task
behavioral6
Sample
data/NCC2.dll
Resource
win10-20231020-en
Behavioral task
behavioral7
Sample
data/NCC3.dll
Resource
win10-20231020-en
Behavioral task
behavioral8
Sample
data/NCCheck.dll
Resource
win10-20231025-en
Behavioral task
behavioral9
Sample
data/Rar.exe
Resource
win10-20231020-en
Behavioral task
behavioral10
Sample
data/RarExt.dll
Resource
win10-20231020-en
Behavioral task
behavioral11
Sample
data/RarExt64.dll
Resource
win10-20231020-en
Behavioral task
behavioral12
Sample
data/WinCon.exe
Resource
win10-20231020-en
Behavioral task
behavioral13
Sample
data/Zip.exe
Resource
win10-20231020-en
Behavioral task
behavioral14
Sample
data/dnlib.dll
Resource
win10-20231020-en
Behavioral task
behavioral15
Sample
data/dotNET_Reactor.Console.exe
Resource
win10-20231020-en
Behavioral task
behavioral16
Sample
data/dotNET_Reactor.exe
Resource
win10-20231025-en
Behavioral task
behavioral17
Sample
data/enc.vbe
Resource
win10-20231020-en
Behavioral task
behavioral18
Sample
data/upx.exe
Resource
win10-20231020-en
Behavioral task
behavioral19
Sample
data/wRar.exe
Resource
win10-20231020-en
Behavioral task
behavioral20
Sample
lib/L1nc0In 1.jar
Resource
win10-20231020-en
Behavioral task
behavioral21
Sample
lib/L1nc0In 10.jar
Resource
win10-20231023-en
Behavioral task
behavioral22
Sample
lib/L1nc0In 11.jar
Resource
win10-20231023-en
Behavioral task
behavioral23
Sample
lib/L1nc0In 12.jar
Resource
win10-20231023-en
Behavioral task
behavioral24
Sample
lib/L1nc0In 13.jar
Resource
win10-20231020-en
Behavioral task
behavioral25
Sample
lib/L1nc0In 14.jar
Resource
win10-20231020-en
Behavioral task
behavioral26
Sample
lib/L1nc0In 2.jar
Resource
win10-20231020-en
Behavioral task
behavioral27
Sample
lib/L1nc0In 3.jar
Resource
win10-20231020-en
Behavioral task
behavioral28
Sample
lib/L1nc0In 4.jar
Resource
win10-20231025-en
Behavioral task
behavioral29
Sample
lib/L1nc0In 5.jar
Resource
win10-20231025-en
Behavioral task
behavioral30
Sample
lib/L1nc0In 6.jar
Resource
win10-20231020-en
Behavioral task
behavioral31
Sample
lib/L1nc0In 7.jar
Resource
win10-20231020-en
Behavioral task
behavioral32
Sample
plugins/TestDCLIB/file.dll
Resource
win10-20231023-en
General
-
Target
data/RarExt64.dll
-
Size
554KB
-
MD5
76a5f50d92f543e566b0152e0be1cf9e
-
SHA1
61db9bb0ffd049cad2bc747f69dff0dc3fc17a28
-
SHA256
db28575f61b1adc88a28ae51ce3b00226e4974ca60894896e414ea408c6ff9fe
-
SHA512
c76a09c6cfb9b067eb41afddd1b9bbb111438502f71d6836cbb194ceec865d7478c7f14254684b52d98685232de04f2e1ef35a55946b5993968c81f2e9d050ae
-
SSDEEP
6144:O2uqTDJ8HTNZ//j3kOhpJcojM1Rz8ot2ybeBwQA7EE9fNaLTxcRRD7cICzdKGgBz:O2ue8HBpJ3M1cybpQcNYLGuqBd3X3uAZ
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).