Overview
overview
10Static
static
10dcrat/123.bat
windows7-x64
10dcrat/123.bat
windows10-2004-x64
10dcrat/DCRat.exe
windows7-x64
10dcrat/DCRat.exe
windows10-2004-x64
10dcrat/data/7zxa.dll
windows7-x64
3dcrat/data/7zxa.dll
windows10-2004-x64
3dcrat/data/DCRAC.exe
windows7-x64
1dcrat/data/DCRAC.exe
windows10-2004-x64
1dcrat/data/DCRCC.exe
windows7-x64
3dcrat/data/DCRCC.exe
windows10-2004-x64
3dcrat/data...lt.exe
windows7-x64
1dcrat/data...lt.exe
windows10-2004-x64
1dcrat/data/NCC2.dll
windows7-x64
1dcrat/data/NCC2.dll
windows10-2004-x64
1dcrat/data/NCC3.dll
windows7-x64
3dcrat/data/NCC3.dll
windows10-2004-x64
3dcrat/data...ck.dll
windows7-x64
1dcrat/data...ck.dll
windows10-2004-x64
1dcrat/data/Rar.exe
windows7-x64
3dcrat/data/Rar.exe
windows10-2004-x64
3dcrat/data/RarExt.dll
windows7-x64
1dcrat/data/RarExt.dll
windows10-2004-x64
3dcrat/data...64.dll
windows7-x64
1dcrat/data...64.dll
windows10-2004-x64
3dcrat/data/WinCon.exe
windows7-x64
1dcrat/data/WinCon.exe
windows10-2004-x64
1dcrat/data/Zip.exe
windows7-x64
1dcrat/data/Zip.exe
windows10-2004-x64
1dcrat/data/dnlib.dll
windows7-x64
1dcrat/data/dnlib.dll
windows10-2004-x64
1dcrat/data...le.exe
windows7-x64
10dcrat/data...le.exe
windows10-2004-x64
10Analysis
-
max time kernel
143s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
04-03-2024 04:18
Behavioral task
behavioral1
Sample
dcrat/123.bat
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dcrat/123.bat
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
dcrat/DCRat.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
dcrat/DCRat.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
dcrat/data/7zxa.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
dcrat/data/7zxa.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
dcrat/data/DCRAC.exe
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
dcrat/data/DCRAC.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
dcrat/data/DCRCC.exe
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
dcrat/data/DCRCC.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
dcrat/data/Default.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
dcrat/data/Default.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
dcrat/data/NCC2.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
dcrat/data/NCC2.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
dcrat/data/NCC3.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
dcrat/data/NCC3.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
dcrat/data/NCCheck.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
dcrat/data/NCCheck.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
dcrat/data/Rar.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
dcrat/data/Rar.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
dcrat/data/RarExt.dll
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
dcrat/data/RarExt.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
dcrat/data/RarExt64.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
dcrat/data/RarExt64.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
dcrat/data/WinCon.exe
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
dcrat/data/WinCon.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
dcrat/data/Zip.exe
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
dcrat/data/Zip.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
dcrat/data/dnlib.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
dcrat/data/dnlib.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
dcrat/data/dotNET_Reactor.Console.exe
Resource
win7-20240221-en
General
-
Target
dcrat/data/Zip.exe
-
Size
263KB
-
MD5
9a2ea4da5eec75298f16ba444d3a98d6
-
SHA1
f4f790430556e36d418498cd2f3112d04dabf877
-
SHA256
2293fe261d5c6f5f2a33004b11f068037677b7aa5a6f792031e31555f31f0d69
-
SHA512
69c86181722d2416c1836c9d24df268ba04704898643d2e741d76d1f1493cd140013c95d8e00ce7a95a280cdd5869769a0fffa2fb0c8dc41bb4c8d8fd69f58f4
-
SSDEEP
3072:sv/MtM8A6OOodzRMOSgNs2Dsx7Cwbj59HvhaxO6M65ysytvg6VNf0ETA8B9kxpjK:sstlOOo8x7n59Z+zyu65QxpX+t4sP
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
Zip.exepid process 3724 Zip.exe 3724 Zip.exe