Analysis
-
max time kernel
144s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
02-03-2024 20:51
General
-
Target
dcrat/data/Rar.exe
-
Size
578KB
-
MD5
eb24024a8a46c71303e0b18d0e1859f6
-
SHA1
e0ee47fcd63beb2168da119f061d03b0bd6872ea
-
SHA256
770d7b5e40ed9b0aff5d0e3fc2ccf9ba10d4925d3441f38b71a35bd26e6e8d98
-
SHA512
292e3090338ee3443acd8c2bde59506f3f89d62bf8ff0d95067a812a22b17c98fc2aa9439d3dfa16dcfe338070d7b5af3acefb696a267435bf5b19dceef83a2c
-
SSDEEP
12288:wS6ZrwO87OYWi14874mT77CkIf3kBmiXtRI/+7bHuVV7:wSOrwO87OM14nmT77Ck28mijQ+bHit
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\dcrat\data\Rar.exe"C:\Users\Admin\AppData\Local\Temp\dcrat\data\Rar.exe"1⤵