Overview
overview
10Static
static
10EclipseRAT...da.dll
windows11-21h2-x64
1EclipseRAT...ey.dll
windows11-21h2-x64
1EclipseRAT...at.exe
windows11-21h2-x64
10EclipseRAT...ox.dll
windows11-21h2-x64
1EclipseRAT...re.dll
windows11-21h2-x64
1EclipseRAT...ms.dll
windows11-21h2-x64
1EclipseRAT...I2.dll
windows11-21h2-x64
1EclipseRAT...or.dll
windows11-21h2-x64
1EclipseRAT...ns.dll
windows11-21h2-x64
1EclipseRAT...es.dll
windows11-21h2-x64
1EclipseRAT...ns.dll
windows11-21h2-x64
1EclipseRAT...es.dll
windows11-21h2-x64
1EclipseRAT...op.dll
windows11-21h2-x64
1EclipseRAT...ns.dll
windows11-21h2-x64
1EclipseRAT...ks.dll
windows11-21h2-x64
1EclipseRAT...ry.dll
windows11-21h2-x64
1EclipseRAT...io.dll
windows11-21h2-x64
1EclipseRAT...re.dll
windows11-21h2-x64
1EclipseRAT...di.dll
windows11-21h2-x64
1EclipseRAT...pi.dll
windows11-21h2-x64
1EclipseRAT...ms.dll
windows11-21h2-x64
1EclipseRAT...MM.dll
windows11-21h2-x64
1EclipseRAT/NAudio.dll
windows11-21h2-x64
1EclipseRAT...on.dll
windows11-21h2-x64
1EclipseRAT...or.dll
windows11-21h2-x64
1EclipseRAT...rs.dll
windows11-21h2-x64
1EclipseRAT...ry.dll
windows11-21h2-x64
1EclipseRAT...ns.dll
windows11-21h2-x64
1EclipseRAT...es.dll
windows11-21h2-x64
1EclipseRAT...rs.dll
windows11-21h2-x64
1EclipseRAT...fe.dll
windows11-21h2-x64
1EclipseRAT...ol.dll
windows11-21h2-x64
1Analysis
- max time kernel
92s - max time network
95s - platform
windows11-21h2_x64 - resource
win11-20240426-en - resource tags
arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system - submitted
16/05/2024, 14:55
Behavioral task
behavioral1
Sample
EclipseRAT/Andromeda.dll
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral2
Sample
EclipseRAT/Dynamitey.dll
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
EclipseRAT/EclipseRat.exe
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral4
Sample
EclipseRAT/FastColoredTextBox.dll
Resource
win11-20240426-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
EclipseRAT/GMap.NET.Core.dll
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral6
Sample
EclipseRAT/GMap.NET.WindowsForms.dll
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
EclipseRAT/Guna.UI2.dll
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral8
Sample
EclipseRAT/IconExtractor.dll
Resource
win11-20240426-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
EclipseRAT/Microsoft.AspNetCore.Hosting.Server.Abstractions.dll
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral10
Sample
EclipseRAT/Microsoft.AspNetCore.Http.Features.dll
Resource
win11-20240419-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
EclipseRAT/Microsoft.Extensions.Configuration.Abstractions.dll
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral12
Sample
EclipseRAT/Microsoft.Extensions.Primitives.dll
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
EclipseRAT/Microsoft.Threading.Tasks.Extensions.Desktop.dll
Resource
win11-20240426-en
windows11-21h2-x64
Behavioral task
behavioral14
Sample
EclipseRAT/Microsoft.Threading.Tasks.Extensions.dll
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
EclipseRAT/Microsoft.Threading.Tasks.dll
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral16
Sample
EclipseRAT/Microsoft.Win32.Registry.dll
Resource
win11-20240426-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
EclipseRAT/NAudio.Asio.dll
Resource
win11-20240426-en
windows11-21h2-x64
Behavioral task
behavioral18
Sample
EclipseRAT/NAudio.Core.dll
Resource
win11-20240426-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
EclipseRAT/NAudio.Midi.dll
Resource
win11-20240426-en
windows11-21h2-x64
Behavioral task
behavioral20
Sample
EclipseRAT/NAudio.Wasapi.dll
Resource
win11-20240426-en
windows11-21h2-x64
Behavioral task
behavioral21
Sample
EclipseRAT/NAudio.WinForms.dll
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral22
Sample
EclipseRAT/NAudio.WinMM.dll
Resource
win11-20240426-en
windows11-21h2-x64
Behavioral task
behavioral23
Sample
EclipseRAT/NAudio.dll
Resource
win11-20240426-en
windows11-21h2-x64
Behavioral task
behavioral24
Sample
EclipseRAT/Newtonsoft.Json.dll
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral25
Sample
EclipseRAT/SimpleObfuscator.dll
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral26
Sample
EclipseRAT/System.Buffers.dll
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral27
Sample
EclipseRAT/System.Memory.dll
Resource
win11-20240508-en
windows11-21h2-x64
Behavioral task
behavioral28
Sample
EclipseRAT/System.Net.Http.Extensions.dll
Resource
win11-20240426-en
windows11-21h2-x64
Behavioral task
behavioral29
Sample
EclipseRAT/System.Net.Http.Primitives.dll
Resource
win11-20240426-en
windows11-21h2-x64
Behavioral task
behavioral30
Sample
EclipseRAT/System.Numerics.Vectors.dll
Resource
win11-20240426-en
windows11-21h2-x64
Behavioral task
behavioral31
Sample
EclipseRAT/System.Runtime.CompilerServices.Unsafe.dll
Resource
win11-20240419-en
windows11-21h2-x64
Behavioral task
behavioral32
Sample
EclipseRAT/System.Security.AccessControl.dll
Resource
win11-20240426-en
windows11-21h2-x64
General
- Target EclipseRAT/System.Security.AccessControl.dll
- Size 30KB
- Sample240516-saw36aaa92
- SHA256 aced52254a8c3cb6ad30f99f8b745296926c49373cab00824c2c4c10ad325b10
- MD5 2d3e0b4ddf8628b41057b2aceef296eb
- SHA1 8a3b1bd9df5d052c24de2304a2928fad86927f6d
- SHA512 faac4233c45a773c4470071b0b2a75ee81eefa45f88b76fea305443514ff9c8429af3d394884933712d1fb7a7a03701f3d9df0f1de345078ddfeeeb5b4dc094b
- SSDEEP 384:3RFGaTHrxhDRtGP/Ksmvt4kyvaMAdB+w3G5h9M9ZV3Mfpcrqmf9wEJqIxVRvFNgp:hAajzDRtGUl4kdWBkyHp98I
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\EclipseRAT\System.Security.AccessControl.dll,#11⤵PID:8
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4580