General
-
Target
267c6d4e9f47e320bc83d14ae62a3b3942b5bc52271981a62634be7859d3e41a.exe
-
Size
1.1MB
-
Sample
240517-bkbrjaaf52
-
MD5
4cf21cf4fe938861269eee0dce7ab40a
-
SHA1
8edccf6b4ce1a73419d25632d9707d1e473bfedc
-
SHA256
267c6d4e9f47e320bc83d14ae62a3b3942b5bc52271981a62634be7859d3e41a
-
SHA512
c5cdf840d65ab2e78480c1a172250696860a70953dade41463352d47f89183c40c15d0672c9268fea68711eb432ff5167189de0bac90fc83b81d563a808f2879
-
SSDEEP
12288:VGcqjGumBv0SNdif3QKRDGUwUPECbyrdgDWaw6+DJKAC4FQAfJ4H1fZ2EsFDUzkj:IzmBv0vDGt3r6+yWJmgHgwSRADpDia
Behavioral task
behavioral1
Sample
267c6d4e9f47e320bc83d14ae62a3b3942b5bc52271981a62634be7859d3e41a.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
267c6d4e9f47e320bc83d14ae62a3b3942b5bc52271981a62634be7859d3e41a.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
267c6d4e9f47e320bc83d14ae62a3b3942b5bc52271981a62634be7859d3e41a.exe
-
Size
1.1MB
-
MD5
4cf21cf4fe938861269eee0dce7ab40a
-
SHA1
8edccf6b4ce1a73419d25632d9707d1e473bfedc
-
SHA256
267c6d4e9f47e320bc83d14ae62a3b3942b5bc52271981a62634be7859d3e41a
-
SHA512
c5cdf840d65ab2e78480c1a172250696860a70953dade41463352d47f89183c40c15d0672c9268fea68711eb432ff5167189de0bac90fc83b81d563a808f2879
-
SSDEEP
12288:VGcqjGumBv0SNdif3QKRDGUwUPECbyrdgDWaw6+DJKAC4FQAfJ4H1fZ2EsFDUzkj:IzmBv0vDGt3r6+yWJmgHgwSRADpDia
Score10/10-
DcRat
DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-