8bc4d422624113b2af547b64fa7df842b821f189ca4d7bad6e75767fec4a9e59

Submit
Reports

Overview

overview

Static

static

123.bat

windows10-1703-x64

DCRat.exe

windows10-1703-x64

data/7zxa.dll

windows10-1703-x64

data/DCRAC.exe

windows10-1703-x64

data/DCRCC.exe

windows10-1703-x64

data/Default.exe

windows10-1703-x64

data/NCC2.dll

windows10-1703-x64

data/NCC3.dll

windows10-1703-x64

data/NCCheck.dll

windows10-1703-x64

data/Rar.exe

windows10-1703-x64

data/RarExt.dll

windows10-1703-x64

data/RarExt64.dll

windows10-1703-x64

data/WinCon.exe

windows10-1703-x64

data/Zip.exe

windows10-1703-x64

data/dnlib.dll

windows10-1703-x64

data/dotNE...le.exe

windows10-1703-x64

data/dotNE...or.exe

windows10-1703-x64

data/enc.vbe

windows10-1703-x64

data/upx.exe

windows10-1703-x64

data/wRar.exe

windows10-1703-x64

lib/IIIlll...lI.jar

windows10-1703-x64

lib/IIIlll...lI.jar

windows10-1703-x64

lib/IIlIlI...lI.jar

windows10-1703-x64

lib/IlIIlI...II.jar

windows10-1703-x64

lib/IlIlII...Il.jar

windows10-1703-x64

lib/IlIllI...Il.jar

windows10-1703-x64

lib/IllIII...II.jar

windows10-1703-x64

lib/lIIllI...Il.jar

windows10-1703-x64

lib/llIlII...lI.jar

windows10-1703-x64

plugins/BS...on.dll

windows10-1703-x64

plugins/Bl...in.dll

windows10-1703-x64

plugins/Bu...in.dll

windows10-1703-x64

Analysis

max time kernel
131s
max time network
140s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
20-04-2024 04:43

Sharing

Copy URL

Twitter E-mail

Static task

static1

upx zgrat

5 signatures

Behavioral task

behavioral1

Sample

123.bat

Resource

win10-20240404-en

discovery

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

DCRat.exe

Resource

win10-20240404-en

discovery

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

data/7zxa.dll

Resource

win10-20240404-en

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

data/DCRAC.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

data/DCRCC.exe

Resource

win10-20240404-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

data/Default.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

data/NCC2.dll

Resource

win10-20240404-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

data/NCC3.dll

Resource

win10-20240404-en

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

data/NCCheck.dll

Resource

win10-20240404-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

data/Rar.exe

Resource

win10-20240404-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

data/RarExt.dll

Resource

win10-20240404-en

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

data/RarExt64.dll

Resource

win10-20240404-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

data/WinCon.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

data/Zip.exe

Resource

win10-20240404-en

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

data/dnlib.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

data/dotNET_Reactor.Console.exe

Resource

win10-20240404-en

zgrat rat

windows10-1703-x64

6 signatures

150 seconds

Behavioral task

behavioral17

Sample

data/dotNET_Reactor.exe

Resource

win10-20240404-en

zgrat rat

windows10-1703-x64

5 signatures

150 seconds

Behavioral task

behavioral18

Sample

data/enc.vbe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

data/upx.exe

Resource

win10-20240404-en

upx

windows10-1703-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

data/wRar.exe

Resource

win10-20240404-en

persistence

windows10-1703-x64

6 signatures

150 seconds

Behavioral task

behavioral21

Sample

lib/IIIllllIlIlllIlIIIIlllIlIlIlllllIIIlIIllllIIIlIllIIlIIllllIIllllllIIlIIIIIIlllIIIlIllllllIIllIlIllIlllIllIlIIIIIIIIllllI.jar

Resource

win10-20240404-en

discovery

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

lib/IIIllllIlIlllIlIIIIlllIlIlIlllllIIIlIIllllIIIlIllIIlIIllllIIllllllIIlIIIIIIlllIIIlIllllllIIllIlI.jar

Resource

win10-20240404-en

discovery

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

lib/IIlIlIllIIlIIllIIllIIlIIIllIlIlIlIIIIlIlIllIIlIIllIIIIIllIIIIlIIIlIIlIIlIIlIllIIlllIIIllIIIlIIlIllllIllIIIIlIIIlIllllllI.jar

Resource

win10-20240404-en

discovery

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral24

Sample

lib/IlIIlIllllIIIIIlIlllIllIlIlIIIIIlIIIlIlIlllIIllIllIIIIIIlIIlllIIIlIIIlllIIIlllllIlIlIlllllIIlIllIIlIIlIIlIIIlllllllIlIII.jar

Resource

win10-20240404-en

discovery

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral25

Sample

lib/IlIlIIIIIIIlIlllllllIllIIlIIllIllllIIIlIIIlIlIIlIIlIIlIllIlllIlIlIIllIIlIIIIIIIlIIIIIIIIIlIlllIIllIlIIlIIIlIlIlllIIIIIIl.jar

Resource

win10-20240404-en

discovery

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral26

Sample

lib/IlIllIIllllllllIlIIlllllIIIIllIIIlIIlllIIllIIllllIIllIlIIIlIIIIlIIIIIlllllllIllIIlIlIllIIlIlIlIIllIlIllIIIlIIIIlIllIIIIl.jar

Resource

win10-20240404-en

discovery

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral27

Sample

lib/IllIIIIllIlIIIIlIlIllIIlIIllIIlIllIIlllllIlllIllIlIIlIIlllIIlIlIlIllIllIIlIIIlIIIllIIIIIllIIlllllIlIIIIIlIIIIIIIIIIIIlII.jar

Resource

win10-20240404-en

discovery

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral28

Sample

lib/lIIllIIlIlllIlIlllIlIIlIIIlllllIIlIlIIllIllIlIlllIlIIlIlIlIIllIlIIIIIllIIlIIlIIlIIllIIIlIIllIlIIIIlIlIIlIIlIllIIlIIlIlIl.jar

Resource

win10-20240404-en

discovery

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

lib/llIlIIIIlIlIlllllIlIIllllIIIlIlIllllIIllllIlllIIlllllIIlIlllIIIIIIlIIllIIIlIlIlllIlIIIlIIIIIllIlllIlllIIllIIllIlIlIIlllI.jar

Resource

win10-20240404-en

discovery

windows10-1703-x64

2 signatures

150 seconds

Behavioral task

behavioral30

Sample

plugins/BSoDProtection/BSoDProtection.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

plugins/BlockInputPlugin/BlockInputPlugin.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

plugins/BuildInstallationTweaksPlugin/BuildInstallationTweaksPlugin.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

data/DCRAC.exe
Size

26KB
MD5

8a1a98367fd8cb7aa977403f88152e60
SHA1

cb56f3348ef9b2bb6f38f3ef2b5522e64222b707
SHA256

730fdccacba82f334638c13a284ae2e8462e10382bf55d2a0d35f25b805bdc02
SHA512

a18dd788496c9d34c538cf547cf1bd3aeffd6c452d615a186c05222043b7bde5a03360cc33c9005951ff4bd076b4fecabeaf418b59d3623d604ff7b308d09e83
SSDEEP

768:DZIex9MGyfCCk5L+VUI5SNcGN0KttZZA9BCfNGJkvmNzJhCY2misDfb4oCij:tIegGy6CA+VT

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\data\DCRAC.exe
"C:\Users\Admin\AppData\Local\Temp\data\DCRAC.exe"
1⤵
PID:4036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4036-0-0x00000284B6CB0000-0x00000284B6CBC000-memory.dmp

Filesize
48KB

Download
memory/4036-1-0x00000284D11C0000-0x00000284D12DE000-memory.dmp

Filesize
1.1MB

Download
memory/4036-2-0x00007FFF8B980000-0x00007FFF8C36C000-memory.dmp

Filesize
9.9MB

Download
memory/4036-3-0x00000284D10F0000-0x00000284D1100000-memory.dmp

Filesize
64KB

Download
memory/4036-4-0x00007FFF8B980000-0x00007FFF8C36C000-memory.dmp

Filesize
9.9MB

Download
memory/4036-5-0x00000284D10F0000-0x00000284D1100000-memory.dmp

Filesize
64KB

Download