General

  • Target

    267c6d4e9f47e320bc83d14ae62a3b3942b5bc52271981a62634be7859d3e41a.exe

  • Size

    1.1MB

  • Sample

    240517-bkbrjaaf52

  • MD5

    4cf21cf4fe938861269eee0dce7ab40a

  • SHA1

    8edccf6b4ce1a73419d25632d9707d1e473bfedc

  • SHA256

    267c6d4e9f47e320bc83d14ae62a3b3942b5bc52271981a62634be7859d3e41a

  • SHA512

    c5cdf840d65ab2e78480c1a172250696860a70953dade41463352d47f89183c40c15d0672c9268fea68711eb432ff5167189de0bac90fc83b81d563a808f2879

  • SSDEEP

    12288:VGcqjGumBv0SNdif3QKRDGUwUPECbyrdgDWaw6+DJKAC4FQAfJ4H1fZ2EsFDUzkj:IzmBv0vDGt3r6+yWJmgHgwSRADpDia

Score
10/10

Malware Config

Targets

    • Target

      267c6d4e9f47e320bc83d14ae62a3b3942b5bc52271981a62634be7859d3e41a.exe

    • Size

      1.1MB

    • MD5

      4cf21cf4fe938861269eee0dce7ab40a

    • SHA1

      8edccf6b4ce1a73419d25632d9707d1e473bfedc

    • SHA256

      267c6d4e9f47e320bc83d14ae62a3b3942b5bc52271981a62634be7859d3e41a

    • SHA512

      c5cdf840d65ab2e78480c1a172250696860a70953dade41463352d47f89183c40c15d0672c9268fea68711eb432ff5167189de0bac90fc83b81d563a808f2879

    • SSDEEP

      12288:VGcqjGumBv0SNdif3QKRDGUwUPECbyrdgDWaw6+DJKAC4FQAfJ4H1fZ2EsFDUzkj:IzmBv0vDGt3r6+yWJmgHgwSRADpDia

    Score
    10/10
    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

    • DCRat payload

      Detects payload of DCRat, commonly dropped by NSIS installers.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks