Overview
overview
8Static
static
8123.bat
windows7-x64
1123.bat
windows10-2004-x64
7DCRat.exe
windows7-x64
1DCRat.exe
windows10-2004-x64
7data/7zxa.dll
windows7-x64
3data/7zxa.dll
windows10-2004-x64
3data/DCRAC.exe
windows7-x64
1data/DCRAC.exe
windows10-2004-x64
1data/DCRCC.exe
windows7-x64
3data/DCRCC.exe
windows10-2004-x64
3data/Default.exe
windows7-x64
1data/Default.exe
windows10-2004-x64
1data/NCC2.dll
windows7-x64
1data/NCC2.dll
windows10-2004-x64
1data/NCC3.dll
windows7-x64
3data/NCC3.dll
windows10-2004-x64
3data/NCCheck.dll
windows7-x64
1data/NCCheck.dll
windows10-2004-x64
1data/Rar.exe
windows7-x64
3data/Rar.exe
windows10-2004-x64
3data/RarExt.dll
windows7-x64
1data/RarExt.dll
windows10-2004-x64
3data/RarExt64.dll
windows7-x64
1data/RarExt64.dll
windows10-2004-x64
3data/WinCon.exe
windows7-x64
1data/WinCon.exe
windows10-2004-x64
1data/Zip.exe
windows7-x64
1data/Zip.exe
windows10-2004-x64
1data/dnlib.dll
windows7-x64
1data/dnlib.dll
windows10-2004-x64
1data/dotNE...le.exe
windows7-x64
7data/dotNE...le.exe
windows10-2004-x64
7Analysis
- max time kernel
119s - max time network
122s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
27/05/2024, 17:28
Behavioral task
behavioral1
Sample
123.bat
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
123.bat
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
DCRat.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
DCRat.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
data/7zxa.dll
Resource
win7-20240419-en
Behavioral task
behavioral6
Sample
data/7zxa.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
data/DCRAC.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
data/DCRAC.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
data/DCRCC.exe
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
data/DCRCC.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
data/Default.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
data/Default.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral13
Sample
data/NCC2.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
data/NCC2.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
data/NCC3.dll
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
data/NCC3.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
data/NCCheck.dll
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
data/NCCheck.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
data/Rar.exe
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
data/Rar.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
data/RarExt.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
data/RarExt.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
data/RarExt64.dll
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
data/RarExt64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
data/WinCon.exe
Resource
win7-20240220-en
Behavioral task
behavioral26
Sample
data/WinCon.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
data/Zip.exe
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
data/Zip.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral29
Sample
data/dnlib.dll
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
data/dnlib.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
data/dotNET_Reactor.Console.exe
Resource
win7-20240508-en
Behavioral task
behavioral32
Sample
data/dotNET_Reactor.Console.exe
Resource
win10v2004-20240508-en
General
- Target data/DCRAC.exe
- Size 26KB
- Sample240527-v2fllacf56
- SHA256 730fdccacba82f334638c13a284ae2e8462e10382bf55d2a0d35f25b805bdc02
- MD5 8a1a98367fd8cb7aa977403f88152e60
- SHA1 cb56f3348ef9b2bb6f38f3ef2b5522e64222b707
- SHA512 a18dd788496c9d34c538cf547cf1bd3aeffd6c452d615a186c05222043b7bde5a03360cc33c9005951ff4bd076b4fecabeaf418b59d3623d604ff7b308d09e83
- SSDEEP 768:DZIex9MGyfCCk5L+VUI5SNcGN0KttZZA9BCfNGJkvmNzJhCY2misDfb4oCij:tIegGy6CA+VT
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2348 wrote to memory of 2264 2348 DCRAC.exe 29 PID 2348 wrote to memory of 2264 2348 DCRAC.exe 29 PID 2348 wrote to memory of 2264 2348 DCRAC.exe 29