Overview
overview
10Static
static
10v2dc/123.exe
windows10-1703-x64
10v2dc/DCRat.exe
windows10-1703-x64
7v2dc/back.gif
windows10-1703-x64
1v2dc/config.cson
windows10-1703-x64
3v2dc/data/7zxa.dll
windows10-1703-x64
3v2dc/data/DCRAC.exe
windows10-1703-x64
1v2dc/data/DCRCC.exe
windows10-1703-x64
3v2dc/data/Default.exe
windows10-1703-x64
1v2dc/data/NCC2.dll
windows10-1703-x64
1v2dc/data/NCC3.dll
windows10-1703-x64
3v2dc/data/NCCheck.dll
windows10-1703-x64
1v2dc/data/Rar.exe
windows10-1703-x64
3v2dc/data/RarExt.dll
windows10-1703-x64
3v2dc/data/...64.dll
windows10-1703-x64
3v2dc/data/WinCon.exe
windows10-1703-x64
1v2dc/data/Zip.exe
windows10-1703-x64
1v2dc/data/dnlib.dll
windows10-1703-x64
1v2dc/data/...le.exe
windows10-1703-x64
7v2dc/data/...or.exe
windows10-1703-x64
7v2dc/data/enc.vbe
windows10-1703-x64
1v2dc/data/kll.temp
windows10-1703-x64
3v2dc/data/upx.exe
windows10-1703-x64
7v2dc/data/wRar.exe
windows10-1703-x64
4v2dc/desig...d.json
windows10-1703-x64
3v2dc/desig...t.json
windows10-1703-x64
3v2dc/desig...l.json
windows10-1703-x64
3v2dc/desig...n.json
windows10-1703-x64
3v2dc/desig...n.json
windows10-1703-x64
3v2dc/desig...n.json
windows10-1703-x64
3v2dc/desig...y.json
windows10-1703-x64
3v2dc/desig...l.json
windows10-1703-x64
3v2dc/desig...n.json
windows10-1703-x64
3General
- Target v2dc.7z
- Size 40.3MB
- Sample240607-w9d86sda34
- SHA256 1c1157e79cd0b4970829201f5ae02476eb20ed821af670004d8cea07f9fee77d
- MD5 27b10ebca5469842d300bc43dca8a48b
- SHA1 4154b196daa65d7f90210e696e07a8ff0f70f249
- SHA512 624796a5dd6853d7b4a6fb9ffdfa99d19bb169290e703af6800b6c3ffe31a33cc633f3faee743aaa9f3c4c2a17b9a9b87998645f65a35bfe3838768cf07ccd48
- SSDEEP 786432:1GyOXuRrKIEs00mClzEWqhTxx+FDaQeM0KTXM/1VuecD8L6KCAp+il:1GyOXkrZEum2zEWatGDaQeIOIejp+il
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
v2dc/123.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
v2dc/DCRat.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
v2dc/back.gif
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
v2dc/config.cson
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
v2dc/data/7zxa.dll
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
v2dc/data/DCRAC.exe
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
v2dc/data/DCRCC.exe
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
v2dc/data/Default.exe
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
v2dc/data/NCC2.dll
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
v2dc/data/NCC3.dll
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
v2dc/data/NCCheck.dll
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
v2dc/data/Rar.exe
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
v2dc/data/RarExt.dll
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
v2dc/data/RarExt64.dll
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
v2dc/data/WinCon.exe
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
v2dc/data/Zip.exe
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
v2dc/data/dnlib.dll
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
v2dc/data/dotNET_Reactor.Console.exe
Resource
win10-20240404-en
Behavioral task
behavioral19
Sample
v2dc/data/dotNET_Reactor.exe
Resource
win10-20240404-en
Behavioral task
behavioral20
Sample
v2dc/data/enc.vbe
Resource
win10-20240404-en
Behavioral task
behavioral21
Sample
v2dc/data/kll.temp
Resource
win10-20240404-en
Behavioral task
behavioral22
Sample
v2dc/data/upx.exe
Resource
win10-20240404-en
Behavioral task
behavioral23
Sample
v2dc/data/wRar.exe
Resource
win10-20240404-en
Behavioral task
behavioral24
Sample
v2dc/design/ActiveWindowNotifierCommand.json
Resource
win10-20240404-en
Behavioral task
behavioral25
Sample
v2dc/design/BlockInput.json
Resource
win10-20240404-en
Behavioral task
behavioral26
Sample
v2dc/design/ClipboardLoggerControl.json
Resource
win10-20240404-en
Behavioral task
behavioral27
Sample
v2dc/design/ClipperTableAddon.json
Resource
win10-20240404-en
Behavioral task
behavioral28
Sample
v2dc/design/CrashLoggerDesign.json
Resource
win10-20240404-en
Behavioral task
behavioral29
Sample
v2dc/design/CryptoStealerTableAddon.json
Resource
win10-20240404-en
Behavioral task
behavioral30
Sample
v2dc/design/DeleteAll_legacy.json
Resource
win10-20240404-en
Behavioral task
behavioral31
Sample
v2dc/design/FakeSteamWindowsControl.json
Resource
win10-20240404-en
Behavioral task
behavioral32
Sample
v2dc/design/FileGrabberTableAddon.json
Resource
win10-20240404-en
Malware Config
Extracted
-
njrat
-
im523
-
Piskosos
-
4.tcp.eu.ngrok.io:18895
-
2a4acf48542c19bfacb0f6e95aab85b9
-
reg_key
2a4acf48542c19bfacb0f6e95aab85b9
-
splitter
|'|'|
Targets
-
- Target v2dc/123.bat
- Size 1.2MB
- SHA256 596be26e0d1db72ea7e9bc262390df67b0d096090dc11d134cf1f2af2e03dcb0
- MD5 af1285ace59caeb75dd5dc3aaf7d80f1
- SHA1 2984d4eef8d54e0c9c5d7c84af7c4cab1fe74f41
- SHA512 1a42a8967dc6c0a6ab9a54e98392c5a02dab7184707ff7a43036877c4ce62b29a553637bbfab64f6316baf3c17cdbd2ec024b67d1bd09ca9173a8c6314e02680
- SSDEEP 24576:32G/nvxW3Ww0t92L7cLU86oBqpddsq5DPJzPA:3bA30S7zo+ddsqY
- MD5 SHA1 SHA512 SSDEEP
-
DcRat
DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Modifies Windows Firewall
-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
-
Legitimate hosting services abused for malware hosting/C2
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
- Target v2dc/DCRat.exe
- Size 72KB
- SHA256 5ede5d774ab65f25357cf5a1fa5e354f6f2a9868651a0fa717485802b21b1939
- MD5 2c7d37e90dd8ab57d06dad5bc7956885
- SHA1 da789c107c4c68b8250b6589e45e5a3cf7a9a143
- SHA512 e74ae891771bfd9c6fcdfbe8e4f33f0d5f7c3457cd84b257500cdaf8fa8b16fe458a18db9b3a60591465982fc2871f4c3f2e7541c765f00a0516f805e7e9ca0f
- SSDEEP 768:P7Zw33FNUf6Nhd/fQ1l+0vM0iT9HvMB90d24:zZ2FWSNhd/4131i89p4
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Modifies file permissions
-
- Target v2dc/back.o
- Size 1.3MB
- SHA256 b90d188886869682a6b1bcec6f7d0bd6c2c24063613f64e6b49c20e511124814
- MD5 03de7629062b5760c440dbc636e26efa
- SHA1 b707c052cad3cd6aff650c16e8c858dca21c8b84
- SHA512 0f1355e6f93dcedbcd4a142b6781a3fec2580165d293093ca27471ca2535dc26f546974db772dc051aac1d40705d182dffd5655900fafb2fa32325f0ff8c5e3f
- SSDEEP 24576:mfySr3NltitHIz9hYEhZakYzqkpug0pyjK4NunIJ+lx5SQ1nd/NN+F1Pfs:0yc3NvQEhZakY/pHQMuIMlxdd/NkFRU
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/config.cson
- Size 128B
- SHA256 b878a76c805d51c5ae18382ad0b04b21247cbd8b749b9338c41ec7688cfba253
- MD5 14cb7871c2a0eddd8bc183edf9c66e8c
- SHA1 686f81b8c8809e922d6baddbfc13cd4aee3ca8d4
- SHA512 9e2df996a374599d2a37cd16158f01ca96e0a9ab0ffb950561a21f4ccdd0e4f9001504738426446fff3ccd9615c841a83ba23a351421b3cdc40c619e069a8a75
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/data/7zxa.dll
- Size 155KB
- SHA256 d0680ac62e94f953df031533acd0acb718ad8494f938d84198c655507709e5df
- MD5 786d4c74c05832a652be5c0a559be1e6
- SHA1 56bc5cf0bef56565da871af9e10ac8c2302d2ad7
- SHA512 29cf07d3acceb716a2e9ec66434170ba7f15c5af3c843253d72be6f7bf1ab942a6e098a423beb33efb9fbf8bb6c967c34d4dedf65aca72984c6aa70c58e0eeb4
- SSDEEP 3072:QwBYN3i204AHpzTjaLd4+OTpLcl28hpQplf4btKL6mCF:E3cp3jaLupLc3fclAKmJ
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target v2dc/data/DCRAC.exe
- Size 26KB
- SHA256 730fdccacba82f334638c13a284ae2e8462e10382bf55d2a0d35f25b805bdc02
- MD5 8a1a98367fd8cb7aa977403f88152e60
- SHA1 cb56f3348ef9b2bb6f38f3ef2b5522e64222b707
- SHA512 a18dd788496c9d34c538cf547cf1bd3aeffd6c452d615a186c05222043b7bde5a03360cc33c9005951ff4bd076b4fecabeaf418b59d3623d604ff7b308d09e83
- SSDEEP 768:DZIex9MGyfCCk5L+VUI5SNcGN0KttZZA9BCfNGJkvmNzJhCY2misDfb4oCij:tIegGy6CA+VT
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/data/DCRCC.exe
- Size 24KB
- SHA256 8f5b38fdde20187e5ab965e60c024b98def9d565ea23f596da4fe13d12e5f5b8
- MD5 7369469d49c34493f1b8a06fc89d9c7f
- SHA1 956b5e6933b6c8141fe6aa16d97b15fc0e985e95
- SHA512 1777cc2a5e11115d71b92c5790be558838aed0173a3d7ff288db44674a0b3151026515d74518a960c2467d9be549cd47567123b59330d7684a9b2919b707a1a3
- SSDEEP 384:QVkGGnEOjdf9FZiJSi6gi8Yd6aHmcL/QKN+eglriL5nOIj3vFy:tFdf9CJ+F8IG1KGleNB5y
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target v2dc/data/Default.SFX
- Size 309KB
- SHA256 b11ad1adfa96eacf5f18cf87785884947a6d35a1baebf4f20f16402b04d5109f
- MD5 89bf0f7e9adf290c6d571eccf79206a9
- SHA1 65f95791234ff93bc3e35f1d35d7a6664872dc56
- SHA512 cfa060f8aa79529fe8a4809ed5faec499fd15bcd4fb4a536759890e536ded2ca26e593b1f8b04d94e998b063a9a9b8b6bb53166976a5cd018913819959dbc7d5
- SSDEEP 6144:ajT5Zh17eWxoG/+ov/2OIQ4wW3OBsCeAW32X+t4Rb:aRZ+IoG/n9IQxW3OBsee2X+t4Rb
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/data/NCC2.dll
- Size 13KB
- SHA256 a0b6bb521e52a99abf5ac1017302da014d37296619078d42d9edf5d86d137f63
- MD5 12e7983a050a5f7f7b501d3cda914248
- SHA1 6ce5d9b763fc05dcdfcaea79a62a8352371d749c
- SHA512 0b8788c858c35e0f8f56d552518adb71c847240f6d7c199243e046c4c2e2ae32cb035a0bc5098631656c5d7d772be4fdfdc6a4e19e00092fb3eb09044998be97
- SSDEEP 192:jKsAWXvf+AxcTC6xFrnT5xoqMSqzqqJocD/HCtVWAc3XTEqx2CvAPhz:9Z/f+XT/xBwqMSqeqqcmUDhKhz
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/data/NCC3.dll
- Size 72KB
- SHA256 38274608d5a4b53ec22f8099f798ba46ce0ed41db65a33dfb3853f0dbf849f6f
- MD5 aa84f91edd922e7b3bb979e663c94f1a
- SHA1 da46b9962a6c6cceef38c3e11b8b5bc9c1b536fa
- SHA512 88392fc77a0300ece306908867be38011530d9eefdf003452ba86d82f2fa4a61c2b27a199f376ac307c095beaa4f52cefcab59c8b28fa187c0bca13f55f2d98b
- SSDEEP 1536:a44UF/3qab79HtYDAD5MPEBq9iNv6qfSOBHfVW:a44G3fRMPiuuv6qqOBHfVW
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target v2dc/data/NCCheck.dll
- Size 162KB
- SHA256 c41cd461470ff3c936e225cea37e5190cb06e3cd70a3d76ca8e5d3aceead5493
- MD5 569052631a6b80c1c6a336c10c978b02
- SHA1 4bc411b19536c90a6ea0917d7d93f3f6560ee6f0
- SHA512 d0e251973a0c6b3fecaa41d9042c7001e4e9e20484fe2ed9ed1ce04a416952054cb010bff6643c0fa093ac60bbe079c11ba0d6f9699224a3db7a56fdbc4f7f69
- SSDEEP 3072:iW3Hj+g/SFOANotkow8WZT75Izm04x7RP+iH3D1VIkB5XFu9H:v36gp5tk5Nx1P+iH3D1VIk6
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/data/Rar.exe
- Size 578KB
- SHA256 770d7b5e40ed9b0aff5d0e3fc2ccf9ba10d4925d3441f38b71a35bd26e6e8d98
- MD5 eb24024a8a46c71303e0b18d0e1859f6
- SHA1 e0ee47fcd63beb2168da119f061d03b0bd6872ea
- SHA512 292e3090338ee3443acd8c2bde59506f3f89d62bf8ff0d95067a812a22b17c98fc2aa9439d3dfa16dcfe338070d7b5af3acefb696a267435bf5b19dceef83a2c
- SSDEEP 12288:wS6ZrwO87OYWi14874mT77CkIf3kBmiXtRI/+7bHuVV7:wSOrwO87OM14nmT77Ck28mijQ+bHit
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target v2dc/data/RarExt.dll
- Size 481KB
- SHA256 35a21f1aebf8ea0ab9be1814131fec1fa079d91b701e505054b69eccbdfd0732
- MD5 e3e09ba1cca853535cad6900133d819e
- SHA1 99865c784613ca201ba8c10d482c9b8c226ce8eb
- SHA512 2fc9978796a68cbee3cac7a3fee1f7415cacfa20ff7515e98fb04006a4b20f4002df327473b33c66ca28cf5d2d2bb9d2a25766487deb68916341ceca10663a3a
- SSDEEP 6144:qukXSvypOmqIdSGHp+A6NeT5P0XMdHFuodDacXqEk8tZ1mqrt5nJKGgBdUhcX7ee:lkiIdFHpwOF0cdln42qEk4j+Bd3X3um
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target v2dc/data/RarExt64.dll
- Size 554KB
- SHA256 db28575f61b1adc88a28ae51ce3b00226e4974ca60894896e414ea408c6ff9fe
- MD5 76a5f50d92f543e566b0152e0be1cf9e
- SHA1 61db9bb0ffd049cad2bc747f69dff0dc3fc17a28
- SHA512 c76a09c6cfb9b067eb41afddd1b9bbb111438502f71d6836cbb194ceec865d7478c7f14254684b52d98685232de04f2e1ef35a55946b5993968c81f2e9d050ae
- SSDEEP 6144:O2uqTDJ8HTNZ//j3kOhpJcojM1Rz8ot2ybeBwQA7EE9fNaLTxcRRD7cICzdKGgBz:O2ue8HBpJ3M1cybpQcNYLGuqBd3X3uAZ
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target v2dc/data/WinCon.SFX
- Size 275KB
- SHA256 ca08ed8423afda4b41757a1f3adf4f855732dc0628fe2ea5d8a96b13f56b9f84
- MD5 30e207b91721e27d2d30c3f627552a95
- SHA1 2fa6368e3d61bdf695e2c878279ad208756a9462
- SHA512 fa24eeead49a824952c2973828bbf9662c0f6eb01d9655c03db46454516e50681d3a10df76b3d3963e5672d2383db336db7caea9197f21ac5872acbb8f6a2404
- SSDEEP 6144:XaBQtMvy7RHKVxMANkIltkaocp+U/ZrbHUO:XntMOKVxMMkIli1cpdpbHn
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/data/Zip.SFX
- Size 263KB
- SHA256 2293fe261d5c6f5f2a33004b11f068037677b7aa5a6f792031e31555f31f0d69
- MD5 9a2ea4da5eec75298f16ba444d3a98d6
- SHA1 f4f790430556e36d418498cd2f3112d04dabf877
- SHA512 69c86181722d2416c1836c9d24df268ba04704898643d2e741d76d1f1493cd140013c95d8e00ce7a95a280cdd5869769a0fffa2fb0c8dc41bb4c8d8fd69f58f4
- SSDEEP 3072:sv/MtM8A6OOodzRMOSgNs2Dsx7Cwbj59HvhaxO6M65ysytvg6VNf0ETA8B9kxpjK:sstlOOo8x7n59Z+zyu65QxpX+t4sP
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/data/dnlib.dll
- Size 1.1MB
- SHA256 83445595d38a8e33513b33dfc201983af4746e5327c9bed470a6282d91d539b6
- MD5 de0069c4097c987bd30ebe8155a8af35
- SHA1 aced007f4d852d7b84c689a92d9c36e24381d375
- SHA512 66c45818e5c555e5250f8250ea704bc4ca32ddb4d5824c852ae5dc0f264b009af73c7c1e0db1b74c14ee6b612608d939386da23b56520cac415cd5a8f60a5502
- SSDEEP 24576:m+pL+hwfQvqx+yLjynb1YNzh/CNX7fegPeH3hid3Hc9ZEu5DkU6FPepU1VWv7fo0:sxvCLUJ
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/data/dotNET_Reactor.Console.exe
- Size 14KB
- SHA256 e817802f166662a7df0b144571354d74b10e34d120f91ae9d84ca3ba925241c6
- MD5 0b4dbf61a98f3e34cdd3a1b08a6a4609
- SHA1 73587f1f5d040541b230513d22d696513dbd4cf9
- SHA512 7cca370890e4e245c84507623531b5f54b76ced3e8c6b87cdfc47ed16560b6a0a5cf9e0556075cd0d9266908e445b854114edd69d50870839624589676c0e688
- SSDEEP 192:8jY53csvsqHwrHEdSAejbMfDn1Gp78dsKGXOdlWW1ksTkwy:8jEnskskQlm1GRJKGXOdlWW1XTR
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Loads dropped DLL
-
- Target v2dc/data/dotNET_Reactor.exe
- Size 5.9MB
- SHA256 78684aea83b1a5c402a87ba0ce2e7ad5b0338462cc804e97369203ce53d29834
- MD5 bbc5441ecd131f5a98dff8be2ebc5294
- SHA1 f90e309443dc760359e69102f366496a53c307d8
- SHA512 46c553554bbcce6307bf68790edf81d2f5431a9576828a9544d98d670ed49178ccb6c7823578ee151d5c1958ef29dbe909185fa134ac12619e9c724db4e007c5
- SSDEEP 49152:WrlboOQElcnBHDghAxhVZNl1PO7uzXqEFSZsvot9YUi+XpZA8/aNUCe0sTK/z1:WBbojBbNTPO7WpFcXw
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Loads dropped DLL
-
- Target v2dc/data/enc.vbe
- Size 692B
- SHA256 5981e508e89c65c445fca892e91b8ec39b1d8563804d0999d963d640aa592444
- MD5 f88125f6eafc7f4805913cf4077b2525
- SHA1 404917f27f1522cac77f3433594ccd290957da21
- SHA512 748249fe186892c96971a63b5055738f2b6beb3e49ba950c834de188fd62da4710ad1a5264f8caead6277b327df299d58e76a4ce219fc30fbd0281b9d5a52f54
- MD5 SHA1 SHA512
Score1/10 -
- Target v2dc/data/kll.temp
- Size 1KB
- SHA256 82a3587531e107c6e282b70a92937313b7a9cbf2466d3e6f29720abce5fd13e2
- MD5 7788d330b55c889465ca72f993f2d74c
- SHA1 fdf587b0b8c5da2565fd70aa624677abb5fe5e37
- SHA512 2e2f4f88c6cdddec44473bc3abfe5d14bdfe649924348a827892a430baae09945c48cc88e66549b76e36258afcc14c33e554e97e07ab18a644d9029fc4cb6fb4
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/data/upx.exe
- Size 402KB
- SHA256 d634cde09d1aa1320a1d4c589d35d306f8350129faf225b2bca394128c2c4442
- MD5 e8b39f250fb67e115e07e9eac5c99708
- SHA1 51bf6ab0baa3a4c6f45be46011baa8ccd7ceaf8f
- SHA512 37418c8941834c95f59bc026e82002035fcdd7ea217061a217d5ab28f9859f1aacf0e9f213bc5eb27e3f23db8d8817ae88abc3c2ab6a4f45ce3e4ca74c0ce7e8
- SSDEEP 12288:eVRYo8O3lmhJ4/f9DbzyYn7gZ7gYESBOY8YsLwxpoS:O8O3BJlgZEczr
- MD5 SHA1 SHA512 SSDEEP
Score7/10 -
- Target v2dc/data/wRar.exe
- Size 2.4MB
- SHA256 1317d70682bd11e5d320af850d6ecbb5a70c200d626ec7bf69c47566894db515
- MD5 fd7b28f197668c62d7ab2eb77ad2750d
- SHA1 d9c0ec348cf944c7f239e92e1bdb66caaf711895
- SHA512 49017ed6caa0ccd00834bca3cd96ef42fc9923e2b6232841680d44e3cb6907dc5cc3c3a8c2aaff8239230755c5dab43a9f9003347cb274d7ff5f0ed06c0c8e61
- SSDEEP 49152:AUIjvGfhVhmERhpo2jQttLGNwZ4zNDNui0hBdH3rP:AHj+zdp1iGNNtNuTBpbP
- MD5 SHA1 SHA512 SSDEEP
Score4/10 -
- Target v2dc/design/ActiveWindowNotifierCommand.json
- Size 1KB
- SHA256 f03860a5d0d7b6589788a2b7eae40d734b79bc0b95be6ccf047283a616823292
- MD5 24a500af2356b7286f9270a42bcb1140
- SHA1 dba8788993898f5e77c50ed1c8ed3ab6e74e2c7c
- SHA512 3f490b82182ca86ea96ae9440b48a54be0efefb7c0d7c9834a0e9abb8e9c23c3b9257ccf0a552ed8e220c5856f3963a9ce9be98cc7c6d4eeebcd58ec6cd6e79c
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/BlockInput.json
- Size 1022B
- SHA256 2540e37277710c83cfaf6ba1a8cec9d64f1ebe679dcd38bad0afe919edb2f7fa
- MD5 e3a369d466e21ad38d7c026ddb164a7f
- SHA1 20b45088c99970c525cf8e27c08a6e3a39385f7c
- SHA512 ceb55a461cd7cfbf455b65a3924c738ab1a9ac15c7fd2a640afda03114d2c635943dd77423c609d1ad3bf21251917d5c987dc69ec63c69cff2f22fb00066873c
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/ClipboardLoggerControl.json
- Size 899B
- SHA256 e6af6c2736bbe585fe0888572b4c9a1b679f1980bd56833aca1034882825a1a0
- MD5 d45977558e6dc65bbc28a66d92fc6245
- SHA1 34d8a4375f09542c31796b212fe92d406fe672f9
- SHA512 4c891561f70b2b1c5955c30ed34e72d80d4ae920e3868b8c8ccf4459d8d8de1d27b4cfb72869c4cabb9f1830aa8d04b5ab60cff98f0966d0cc8320ef8a764e22
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/ClipperTableAddon.json
- Size 187B
- SHA256 8e01006119e7c5fa18a5ee2c179bc7c2be840a35c3d64ee7107d2dab35ebf07d
- MD5 dfc1f7bb003ce16c130fc2ad6362bb9c
- SHA1 61a633aa2fd58c8ed0de6918a98694f9a4f8da12
- SHA512 3cb77c637fee6dd7c3bbda33e058c883e1fecf3d3891bf13fb75180e4e56d69c400f9f172c97f908d27874aff16b7a66f5fe21d5ba8d862719796c8a64588f65
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/CrashLoggerDesign.json
- Size 638B
- SHA256 1298a9a9b24708d6f0cb7d69880aed35713912be570dab1f55a4417a5a175137
- MD5 6e4480faac07c0ac376efc90544de056
- SHA1 b0aa2c58af36165e2084a58183c78616536619f0
- SHA512 201ec53d19187c744d7004aee1294f36cf391a780f5ce1263777195a3a4a308d343f03130569c9d3bb87e33c5ae05c9b00ab54c571d0c76bec8f9b02180c4867
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/CryptoStealerTableAddon.json
- Size 1KB
- SHA256 ea50120bf3c201b0faa08f6d3955635465d692a948e872febaad9a24a240b50a
- MD5 07b94d5cd38e29730e55158eef2b2d96
- SHA1 650b6acaa33a408fab1fa8db108223b1695caa76
- SHA512 a48d19de9b8d32d548abb9da8887bd09a1a03bf5dcec9f2cdb6b5f29ed3511a2043c97ae2c94711ae02f98714a8728e5f9341c49a1180ccdbcb915f23bd98b65
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/DeleteAll_legacy.json
- Size 505B
- SHA256 4ba6475a0a4c6c5066edf7e6804b3aea7f068158a5d4f6338cd588aabfb5761b
- MD5 9f362df9eae724c6fa1206150fa64a08
- SHA1 9ea82022a572b6453867cb5614cb1b4cf1a91a04
- SHA512 508fe38aa5745b1252784d95b6b0ca2dfcd3d7c9f42498693bc2eb5d651eed720abf518e21a943f6a6a4a0f0a15b2d5cab1a6ede11a11349e6b42a8ba269f013
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/FakeSteamWindowsControl.json
- Size 2KB
- SHA256 868d7fa7c022692501ab3a84708119f6ac768eba9105ba5fb916fc89e816ed9f
- MD5 62fd8e814077a73ab91eb488a8fe9782
- SHA1 47579957daa38f03b66539b8d64926fc705a90cf
- SHA512 7eac446d04e157e559d907aadbc2f04f192918bd33851d782083e30db2f6c70931ffa50ae85c55b3d21b8c98f2ef3fb81e355efa008a7412bd2ba6eacf61aa7e
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/FileGrabberTableAddon.json
- Size 285B
- SHA256 22d5735285b207d83d2ff457bb08374286de6f6d947ae0c65a9cdc404353811a
- MD5 c12094143df7eea4fce65d9c32ce01d4
- SHA1 5178f2cddf82a98f2e2472a12580f36eb6cb2559
- SHA512 5852e83ff213d14b912b6fd868c6bd6d7f3dbc13d23fcea5dba068ad3c32e81f588c0cc26b0caae5e3713f3e0fd2de76b65e97ca0931091dc40b383beacebfa0
- MD5 SHA1 SHA512
Score3/10
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Change Default File Association
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Change Default File Association
1Scheduled Task/Job
1