Overview

overview

10

Static

static

3

2d0b8663c3...7c.exe

windows7-x64

10

2d0b8663c3...7c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d0b8663c370b76694a77d6ce5f3897c

  • Size

    448KB

  • Sample

    231231-h4bn7sgde9

  • MD5

    2d0b8663c370b76694a77d6ce5f3897c

  • SHA1

    f803c6a204231bf80b8ee47912c43d597dbfda8f

  • SHA256

    bfec5909532fa13fa9e1a2ef05a6d053c44a6aae7f75715bd6f8b0c6264e7330

  • SHA512

    837d15e30285cdc0b8935bb1f72d06e2c9cd96423dffd81586ed692d27a432496c9da8413c8f356a9be02cb53f9fddd967f724f17799169baf0465ddce49388d

  • SSDEEP

    12288:6QcCNAX253YeA+2CzSIPi2eWW7IP8T9C57h:6QcCNfpi+vJBc9I

Score
10/10
darkvncrat

Malware Config

Targets

    • Target

      2d0b8663c370b76694a77d6ce5f3897c

    • Size

      448KB

    • MD5

      2d0b8663c370b76694a77d6ce5f3897c

    • SHA1

      f803c6a204231bf80b8ee47912c43d597dbfda8f

    • SHA256

      bfec5909532fa13fa9e1a2ef05a6d053c44a6aae7f75715bd6f8b0c6264e7330

    • SHA512

      837d15e30285cdc0b8935bb1f72d06e2c9cd96423dffd81586ed692d27a432496c9da8413c8f356a9be02cb53f9fddd967f724f17799169baf0465ddce49388d

    • SSDEEP

      12288:6QcCNAX253YeA+2CzSIPi2eWW7IP8T9C57h:6QcCNfpi+vJBc9I

    Score
    10/10
    darkvncrat

    • DarkVNC

      DarkVNC is a malicious version of the famous VNC software.

      ratdarkvnc

    • DarkVNC payload

      rat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks