Resubmissions

25/05/2024, 20:56

240525-zrdfpsab51 10

25/05/2024, 20:56

240525-zrad2saf38 5

25/05/2024, 20:35

240525-zc65gaaa44 10

25/05/2024, 20:24

240525-y6wp6ahf58 10

General

  • Target

    https://mega.nz/file/wncXiYhZ#ABJEpmoiGH0hIeVVKQy7V_ALtGclDnJ4rFrDjwZ8kDE

  • Sample

    240525-y6wp6ahf58

Score
10/10

Malware Config

Targets

    • Target

      https://mega.nz/file/wncXiYhZ#ABJEpmoiGH0hIeVVKQy7V_ALtGclDnJ4rFrDjwZ8kDE

    Score
    10/10
    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

    • DCRat payload

      Detects payload of DCRat, commonly dropped by NSIS installers.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks