Overview
overview
10Static
static
10v2dc/123.exe
windows10-1703-x64
10v2dc/DCRat.exe
windows10-1703-x64
7v2dc/back.gif
windows10-1703-x64
1v2dc/config.cson
windows10-1703-x64
3v2dc/data/7zxa.dll
windows10-1703-x64
3v2dc/data/DCRAC.exe
windows10-1703-x64
1v2dc/data/DCRCC.exe
windows10-1703-x64
3v2dc/data/Default.exe
windows10-1703-x64
1v2dc/data/NCC2.dll
windows10-1703-x64
1v2dc/data/NCC3.dll
windows10-1703-x64
3v2dc/data/NCCheck.dll
windows10-1703-x64
1v2dc/data/Rar.exe
windows10-1703-x64
3v2dc/data/RarExt.dll
windows10-1703-x64
3v2dc/data/...64.dll
windows10-1703-x64
3v2dc/data/WinCon.exe
windows10-1703-x64
1v2dc/data/Zip.exe
windows10-1703-x64
1v2dc/data/dnlib.dll
windows10-1703-x64
1v2dc/data/...le.exe
windows10-1703-x64
7v2dc/data/...or.exe
windows10-1703-x64
7v2dc/data/enc.vbe
windows10-1703-x64
1v2dc/data/kll.temp
windows10-1703-x64
3v2dc/data/upx.exe
windows10-1703-x64
7v2dc/data/wRar.exe
windows10-1703-x64
4v2dc/desig...d.json
windows10-1703-x64
3v2dc/desig...t.json
windows10-1703-x64
3v2dc/desig...l.json
windows10-1703-x64
3v2dc/desig...n.json
windows10-1703-x64
3v2dc/desig...n.json
windows10-1703-x64
3v2dc/desig...n.json
windows10-1703-x64
3v2dc/desig...y.json
windows10-1703-x64
3v2dc/desig...l.json
windows10-1703-x64
3v2dc/desig...n.json
windows10-1703-x64
3General
- Target v2dc.7z
- Size 40.3MB
- Sample240607-w9d86sda34
- SHA256 1c1157e79cd0b4970829201f5ae02476eb20ed821af670004d8cea07f9fee77d
- MD5 27b10ebca5469842d300bc43dca8a48b
- SHA1 4154b196daa65d7f90210e696e07a8ff0f70f249
- SHA512 624796a5dd6853d7b4a6fb9ffdfa99d19bb169290e703af6800b6c3ffe31a33cc633f3faee743aaa9f3c4c2a17b9a9b87998645f65a35bfe3838768cf07ccd48
- SSDEEP 786432:1GyOXuRrKIEs00mClzEWqhTxx+FDaQeM0KTXM/1VuecD8L6KCAp+il:1GyOXkrZEum2zEWatGDaQeIOIejp+il
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
v2dc/123.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
v2dc/DCRat.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
v2dc/back.gif
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
v2dc/config.cson
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
v2dc/data/7zxa.dll
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
v2dc/data/DCRAC.exe
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
v2dc/data/DCRCC.exe
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
v2dc/data/Default.exe
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
v2dc/data/NCC2.dll
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
v2dc/data/NCC3.dll
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
v2dc/data/NCCheck.dll
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
v2dc/data/Rar.exe
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
v2dc/data/RarExt.dll
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
v2dc/data/RarExt64.dll
Resource
win10-20240404-en
Behavioral task
behavioral15
Sample
v2dc/data/WinCon.exe
Resource
win10-20240404-en
Behavioral task
behavioral16
Sample
v2dc/data/Zip.exe
Resource
win10-20240404-en
Behavioral task
behavioral17
Sample
v2dc/data/dnlib.dll
Resource
win10-20240404-en
Behavioral task
behavioral18
Sample
v2dc/data/dotNET_Reactor.Console.exe
Resource
win10-20240404-en
Behavioral task
behavioral19
Sample
v2dc/data/dotNET_Reactor.exe
Resource
win10-20240404-en
Behavioral task
behavioral20
Sample
v2dc/data/enc.vbe
Resource
win10-20240404-en
Behavioral task
behavioral21
Sample
v2dc/data/kll.temp
Resource
win10-20240404-en
Behavioral task
behavioral22
Sample
v2dc/data/upx.exe
Resource
win10-20240404-en
Behavioral task
behavioral23
Sample
v2dc/data/wRar.exe
Resource
win10-20240404-en
Behavioral task
behavioral24
Sample
v2dc/design/ActiveWindowNotifierCommand.json
Resource
win10-20240404-en
Behavioral task
behavioral25
Sample
v2dc/design/BlockInput.json
Resource
win10-20240404-en
Behavioral task
behavioral26
Sample
v2dc/design/ClipboardLoggerControl.json
Resource
win10-20240404-en
Behavioral task
behavioral27
Sample
v2dc/design/ClipperTableAddon.json
Resource
win10-20240404-en
Behavioral task
behavioral28
Sample
v2dc/design/CrashLoggerDesign.json
Resource
win10-20240404-en
Behavioral task
behavioral29
Sample
v2dc/design/CryptoStealerTableAddon.json
Resource
win10-20240404-en
Behavioral task
behavioral30
Sample
v2dc/design/DeleteAll_legacy.json
Resource
win10-20240404-en
Behavioral task
behavioral31
Sample
v2dc/design/FakeSteamWindowsControl.json
Resource
win10-20240404-en
Behavioral task
behavioral32
Sample
v2dc/design/FileGrabberTableAddon.json
Resource
win10-20240404-en
Malware Config
Extracted
-
njrat
-
im523
-
Piskosos
-
4.tcp.eu.ngrok.io:18895
-
2a4acf48542c19bfacb0f6e95aab85b9
-
reg_key
2a4acf48542c19bfacb0f6e95aab85b9
-
splitter
|'|'|
Targets
-
- Target v2dc/123.bat
- Size 1.2MB
- SHA256 596be26e0d1db72ea7e9bc262390df67b0d096090dc11d134cf1f2af2e03dcb0
- MD5 af1285ace59caeb75dd5dc3aaf7d80f1
- SHA1 2984d4eef8d54e0c9c5d7c84af7c4cab1fe74f41
- SHA512 1a42a8967dc6c0a6ab9a54e98392c5a02dab7184707ff7a43036877c4ce62b29a553637bbfab64f6316baf3c17cdbd2ec024b67d1bd09ca9173a8c6314e02680
- SSDEEP 24576:32G/nvxW3Ww0t92L7cLU86oBqpddsq5DPJzPA:3bA30S7zo+ddsqY
- MD5 SHA1 SHA512 SSDEEP
DcRat
DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
Modifies Windows Firewall
Drops startup file
Executes dropped EXE
Adds Run key to start application
Legitimate hosting services abused for malware hosting/C2
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
- Target v2dc/DCRat.exe
- Size 72KB
- SHA256 5ede5d774ab65f25357cf5a1fa5e354f6f2a9868651a0fa717485802b21b1939
- MD5 2c7d37e90dd8ab57d06dad5bc7956885
- SHA1 da789c107c4c68b8250b6589e45e5a3cf7a9a143
- SHA512 e74ae891771bfd9c6fcdfbe8e4f33f0d5f7c3457cd84b257500cdaf8fa8b16fe458a18db9b3a60591465982fc2871f4c3f2e7541c765f00a0516f805e7e9ca0f
- SSDEEP 768:P7Zw33FNUf6Nhd/fQ1l+0vM0iT9HvMB90d24:zZ2FWSNhd/4131i89p4
- MD5 SHA1 SHA512 SSDEEP
Score7/10Modifies file permissions
-
- Target v2dc/back.o
- Size 1.3MB
- SHA256 b90d188886869682a6b1bcec6f7d0bd6c2c24063613f64e6b49c20e511124814
- MD5 03de7629062b5760c440dbc636e26efa
- SHA1 b707c052cad3cd6aff650c16e8c858dca21c8b84
- SHA512 0f1355e6f93dcedbcd4a142b6781a3fec2580165d293093ca27471ca2535dc26f546974db772dc051aac1d40705d182dffd5655900fafb2fa32325f0ff8c5e3f
- SSDEEP 24576:mfySr3NltitHIz9hYEhZakYzqkpug0pyjK4NunIJ+lx5SQ1nd/NN+F1Pfs:0yc3NvQEhZakY/pHQMuIMlxdd/NkFRU
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/config.cson
- Size 128B
- SHA256 b878a76c805d51c5ae18382ad0b04b21247cbd8b749b9338c41ec7688cfba253
- MD5 14cb7871c2a0eddd8bc183edf9c66e8c
- SHA1 686f81b8c8809e922d6baddbfc13cd4aee3ca8d4
- SHA512 9e2df996a374599d2a37cd16158f01ca96e0a9ab0ffb950561a21f4ccdd0e4f9001504738426446fff3ccd9615c841a83ba23a351421b3cdc40c619e069a8a75
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/data/7zxa.dll
- Size 155KB
- SHA256 d0680ac62e94f953df031533acd0acb718ad8494f938d84198c655507709e5df
- MD5 786d4c74c05832a652be5c0a559be1e6
- SHA1 56bc5cf0bef56565da871af9e10ac8c2302d2ad7
- SHA512 29cf07d3acceb716a2e9ec66434170ba7f15c5af3c843253d72be6f7bf1ab942a6e098a423beb33efb9fbf8bb6c967c34d4dedf65aca72984c6aa70c58e0eeb4
- SSDEEP 3072:QwBYN3i204AHpzTjaLd4+OTpLcl28hpQplf4btKL6mCF:E3cp3jaLupLc3fclAKmJ
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target v2dc/data/DCRAC.exe
- Size 26KB
- SHA256 730fdccacba82f334638c13a284ae2e8462e10382bf55d2a0d35f25b805bdc02
- MD5 8a1a98367fd8cb7aa977403f88152e60
- SHA1 cb56f3348ef9b2bb6f38f3ef2b5522e64222b707
- SHA512 a18dd788496c9d34c538cf547cf1bd3aeffd6c452d615a186c05222043b7bde5a03360cc33c9005951ff4bd076b4fecabeaf418b59d3623d604ff7b308d09e83
- SSDEEP 768:DZIex9MGyfCCk5L+VUI5SNcGN0KttZZA9BCfNGJkvmNzJhCY2misDfb4oCij:tIegGy6CA+VT
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/data/DCRCC.exe
- Size 24KB
- SHA256 8f5b38fdde20187e5ab965e60c024b98def9d565ea23f596da4fe13d12e5f5b8
- MD5 7369469d49c34493f1b8a06fc89d9c7f
- SHA1 956b5e6933b6c8141fe6aa16d97b15fc0e985e95
- SHA512 1777cc2a5e11115d71b92c5790be558838aed0173a3d7ff288db44674a0b3151026515d74518a960c2467d9be549cd47567123b59330d7684a9b2919b707a1a3
- SSDEEP 384:QVkGGnEOjdf9FZiJSi6gi8Yd6aHmcL/QKN+eglriL5nOIj3vFy:tFdf9CJ+F8IG1KGleNB5y
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target v2dc/data/Default.SFX
- Size 309KB
- SHA256 b11ad1adfa96eacf5f18cf87785884947a6d35a1baebf4f20f16402b04d5109f
- MD5 89bf0f7e9adf290c6d571eccf79206a9
- SHA1 65f95791234ff93bc3e35f1d35d7a6664872dc56
- SHA512 cfa060f8aa79529fe8a4809ed5faec499fd15bcd4fb4a536759890e536ded2ca26e593b1f8b04d94e998b063a9a9b8b6bb53166976a5cd018913819959dbc7d5
- SSDEEP 6144:ajT5Zh17eWxoG/+ov/2OIQ4wW3OBsCeAW32X+t4Rb:aRZ+IoG/n9IQxW3OBsee2X+t4Rb
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/data/NCC2.dll
- Size 13KB
- SHA256 a0b6bb521e52a99abf5ac1017302da014d37296619078d42d9edf5d86d137f63
- MD5 12e7983a050a5f7f7b501d3cda914248
- SHA1 6ce5d9b763fc05dcdfcaea79a62a8352371d749c
- SHA512 0b8788c858c35e0f8f56d552518adb71c847240f6d7c199243e046c4c2e2ae32cb035a0bc5098631656c5d7d772be4fdfdc6a4e19e00092fb3eb09044998be97
- SSDEEP 192:jKsAWXvf+AxcTC6xFrnT5xoqMSqzqqJocD/HCtVWAc3XTEqx2CvAPhz:9Z/f+XT/xBwqMSqeqqcmUDhKhz
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/data/NCC3.dll
- Size 72KB
- SHA256 38274608d5a4b53ec22f8099f798ba46ce0ed41db65a33dfb3853f0dbf849f6f
- MD5 aa84f91edd922e7b3bb979e663c94f1a
- SHA1 da46b9962a6c6cceef38c3e11b8b5bc9c1b536fa
- SHA512 88392fc77a0300ece306908867be38011530d9eefdf003452ba86d82f2fa4a61c2b27a199f376ac307c095beaa4f52cefcab59c8b28fa187c0bca13f55f2d98b
- SSDEEP 1536:a44UF/3qab79HtYDAD5MPEBq9iNv6qfSOBHfVW:a44G3fRMPiuuv6qqOBHfVW
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target v2dc/data/NCCheck.dll
- Size 162KB
- SHA256 c41cd461470ff3c936e225cea37e5190cb06e3cd70a3d76ca8e5d3aceead5493
- MD5 569052631a6b80c1c6a336c10c978b02
- SHA1 4bc411b19536c90a6ea0917d7d93f3f6560ee6f0
- SHA512 d0e251973a0c6b3fecaa41d9042c7001e4e9e20484fe2ed9ed1ce04a416952054cb010bff6643c0fa093ac60bbe079c11ba0d6f9699224a3db7a56fdbc4f7f69
- SSDEEP 3072:iW3Hj+g/SFOANotkow8WZT75Izm04x7RP+iH3D1VIkB5XFu9H:v36gp5tk5Nx1P+iH3D1VIk6
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/data/Rar.exe
- Size 578KB
- SHA256 770d7b5e40ed9b0aff5d0e3fc2ccf9ba10d4925d3441f38b71a35bd26e6e8d98
- MD5 eb24024a8a46c71303e0b18d0e1859f6
- SHA1 e0ee47fcd63beb2168da119f061d03b0bd6872ea
- SHA512 292e3090338ee3443acd8c2bde59506f3f89d62bf8ff0d95067a812a22b17c98fc2aa9439d3dfa16dcfe338070d7b5af3acefb696a267435bf5b19dceef83a2c
- SSDEEP 12288:wS6ZrwO87OYWi14874mT77CkIf3kBmiXtRI/+7bHuVV7:wSOrwO87OM14nmT77Ck28mijQ+bHit
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target v2dc/data/RarExt.dll
- Size 481KB
- SHA256 35a21f1aebf8ea0ab9be1814131fec1fa079d91b701e505054b69eccbdfd0732
- MD5 e3e09ba1cca853535cad6900133d819e
- SHA1 99865c784613ca201ba8c10d482c9b8c226ce8eb
- SHA512 2fc9978796a68cbee3cac7a3fee1f7415cacfa20ff7515e98fb04006a4b20f4002df327473b33c66ca28cf5d2d2bb9d2a25766487deb68916341ceca10663a3a
- SSDEEP 6144:qukXSvypOmqIdSGHp+A6NeT5P0XMdHFuodDacXqEk8tZ1mqrt5nJKGgBdUhcX7ee:lkiIdFHpwOF0cdln42qEk4j+Bd3X3um
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target v2dc/data/RarExt64.dll
- Size 554KB
- SHA256 db28575f61b1adc88a28ae51ce3b00226e4974ca60894896e414ea408c6ff9fe
- MD5 76a5f50d92f543e566b0152e0be1cf9e
- SHA1 61db9bb0ffd049cad2bc747f69dff0dc3fc17a28
- SHA512 c76a09c6cfb9b067eb41afddd1b9bbb111438502f71d6836cbb194ceec865d7478c7f14254684b52d98685232de04f2e1ef35a55946b5993968c81f2e9d050ae
- SSDEEP 6144:O2uqTDJ8HTNZ//j3kOhpJcojM1Rz8ot2ybeBwQA7EE9fNaLTxcRRD7cICzdKGgBz:O2ue8HBpJ3M1cybpQcNYLGuqBd3X3uAZ
- MD5 SHA1 SHA512 SSDEEP
Score3/10 -
- Target v2dc/data/WinCon.SFX
- Size 275KB
- SHA256 ca08ed8423afda4b41757a1f3adf4f855732dc0628fe2ea5d8a96b13f56b9f84
- MD5 30e207b91721e27d2d30c3f627552a95
- SHA1 2fa6368e3d61bdf695e2c878279ad208756a9462
- SHA512 fa24eeead49a824952c2973828bbf9662c0f6eb01d9655c03db46454516e50681d3a10df76b3d3963e5672d2383db336db7caea9197f21ac5872acbb8f6a2404
- SSDEEP 6144:XaBQtMvy7RHKVxMANkIltkaocp+U/ZrbHUO:XntMOKVxMMkIli1cpdpbHn
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/data/Zip.SFX
- Size 263KB
- SHA256 2293fe261d5c6f5f2a33004b11f068037677b7aa5a6f792031e31555f31f0d69
- MD5 9a2ea4da5eec75298f16ba444d3a98d6
- SHA1 f4f790430556e36d418498cd2f3112d04dabf877
- SHA512 69c86181722d2416c1836c9d24df268ba04704898643d2e741d76d1f1493cd140013c95d8e00ce7a95a280cdd5869769a0fffa2fb0c8dc41bb4c8d8fd69f58f4
- SSDEEP 3072:sv/MtM8A6OOodzRMOSgNs2Dsx7Cwbj59HvhaxO6M65ysytvg6VNf0ETA8B9kxpjK:sstlOOo8x7n59Z+zyu65QxpX+t4sP
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/data/dnlib.dll
- Size 1.1MB
- SHA256 83445595d38a8e33513b33dfc201983af4746e5327c9bed470a6282d91d539b6
- MD5 de0069c4097c987bd30ebe8155a8af35
- SHA1 aced007f4d852d7b84c689a92d9c36e24381d375
- SHA512 66c45818e5c555e5250f8250ea704bc4ca32ddb4d5824c852ae5dc0f264b009af73c7c1e0db1b74c14ee6b612608d939386da23b56520cac415cd5a8f60a5502
- SSDEEP 24576:m+pL+hwfQvqx+yLjynb1YNzh/CNX7fegPeH3hid3Hc9ZEu5DkU6FPepU1VWv7fo0:sxvCLUJ
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target v2dc/data/dotNET_Reactor.Console.exe
- Size 14KB
- SHA256 e817802f166662a7df0b144571354d74b10e34d120f91ae9d84ca3ba925241c6
- MD5 0b4dbf61a98f3e34cdd3a1b08a6a4609
- SHA1 73587f1f5d040541b230513d22d696513dbd4cf9
- SHA512 7cca370890e4e245c84507623531b5f54b76ced3e8c6b87cdfc47ed16560b6a0a5cf9e0556075cd0d9266908e445b854114edd69d50870839624589676c0e688
- SSDEEP 192:8jY53csvsqHwrHEdSAejbMfDn1Gp78dsKGXOdlWW1ksTkwy:8jEnskskQlm1GRJKGXOdlWW1XTR
- MD5 SHA1 SHA512 SSDEEP
Score7/10Loads dropped DLL
-
- Target v2dc/data/dotNET_Reactor.exe
- Size 5.9MB
- SHA256 78684aea83b1a5c402a87ba0ce2e7ad5b0338462cc804e97369203ce53d29834
- MD5 bbc5441ecd131f5a98dff8be2ebc5294
- SHA1 f90e309443dc760359e69102f366496a53c307d8
- SHA512 46c553554bbcce6307bf68790edf81d2f5431a9576828a9544d98d670ed49178ccb6c7823578ee151d5c1958ef29dbe909185fa134ac12619e9c724db4e007c5
- SSDEEP 49152:WrlboOQElcnBHDghAxhVZNl1PO7uzXqEFSZsvot9YUi+XpZA8/aNUCe0sTK/z1:WBbojBbNTPO7WpFcXw
- MD5 SHA1 SHA512 SSDEEP
Score7/10Loads dropped DLL
-
- Target v2dc/data/enc.vbe
- Size 692B
- SHA256 5981e508e89c65c445fca892e91b8ec39b1d8563804d0999d963d640aa592444
- MD5 f88125f6eafc7f4805913cf4077b2525
- SHA1 404917f27f1522cac77f3433594ccd290957da21
- SHA512 748249fe186892c96971a63b5055738f2b6beb3e49ba950c834de188fd62da4710ad1a5264f8caead6277b327df299d58e76a4ce219fc30fbd0281b9d5a52f54
- MD5 SHA1 SHA512
Score1/10 -
- Target v2dc/data/kll.temp
- Size 1KB
- SHA256 82a3587531e107c6e282b70a92937313b7a9cbf2466d3e6f29720abce5fd13e2
- MD5 7788d330b55c889465ca72f993f2d74c
- SHA1 fdf587b0b8c5da2565fd70aa624677abb5fe5e37
- SHA512 2e2f4f88c6cdddec44473bc3abfe5d14bdfe649924348a827892a430baae09945c48cc88e66549b76e36258afcc14c33e554e97e07ab18a644d9029fc4cb6fb4
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/data/upx.exe
- Size 402KB
- SHA256 d634cde09d1aa1320a1d4c589d35d306f8350129faf225b2bca394128c2c4442
- MD5 e8b39f250fb67e115e07e9eac5c99708
- SHA1 51bf6ab0baa3a4c6f45be46011baa8ccd7ceaf8f
- SHA512 37418c8941834c95f59bc026e82002035fcdd7ea217061a217d5ab28f9859f1aacf0e9f213bc5eb27e3f23db8d8817ae88abc3c2ab6a4f45ce3e4ca74c0ce7e8
- SSDEEP 12288:eVRYo8O3lmhJ4/f9DbzyYn7gZ7gYESBOY8YsLwxpoS:O8O3BJlgZEczr
- MD5 SHA1 SHA512 SSDEEP
Score7/10 -
- Target v2dc/data/wRar.exe
- Size 2.4MB
- SHA256 1317d70682bd11e5d320af850d6ecbb5a70c200d626ec7bf69c47566894db515
- MD5 fd7b28f197668c62d7ab2eb77ad2750d
- SHA1 d9c0ec348cf944c7f239e92e1bdb66caaf711895
- SHA512 49017ed6caa0ccd00834bca3cd96ef42fc9923e2b6232841680d44e3cb6907dc5cc3c3a8c2aaff8239230755c5dab43a9f9003347cb274d7ff5f0ed06c0c8e61
- SSDEEP 49152:AUIjvGfhVhmERhpo2jQttLGNwZ4zNDNui0hBdH3rP:AHj+zdp1iGNNtNuTBpbP
- MD5 SHA1 SHA512 SSDEEP
Score4/10 -
- Target v2dc/design/ActiveWindowNotifierCommand.json
- Size 1KB
- SHA256 f03860a5d0d7b6589788a2b7eae40d734b79bc0b95be6ccf047283a616823292
- MD5 24a500af2356b7286f9270a42bcb1140
- SHA1 dba8788993898f5e77c50ed1c8ed3ab6e74e2c7c
- SHA512 3f490b82182ca86ea96ae9440b48a54be0efefb7c0d7c9834a0e9abb8e9c23c3b9257ccf0a552ed8e220c5856f3963a9ce9be98cc7c6d4eeebcd58ec6cd6e79c
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/BlockInput.json
- Size 1022B
- SHA256 2540e37277710c83cfaf6ba1a8cec9d64f1ebe679dcd38bad0afe919edb2f7fa
- MD5 e3a369d466e21ad38d7c026ddb164a7f
- SHA1 20b45088c99970c525cf8e27c08a6e3a39385f7c
- SHA512 ceb55a461cd7cfbf455b65a3924c738ab1a9ac15c7fd2a640afda03114d2c635943dd77423c609d1ad3bf21251917d5c987dc69ec63c69cff2f22fb00066873c
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/ClipboardLoggerControl.json
- Size 899B
- SHA256 e6af6c2736bbe585fe0888572b4c9a1b679f1980bd56833aca1034882825a1a0
- MD5 d45977558e6dc65bbc28a66d92fc6245
- SHA1 34d8a4375f09542c31796b212fe92d406fe672f9
- SHA512 4c891561f70b2b1c5955c30ed34e72d80d4ae920e3868b8c8ccf4459d8d8de1d27b4cfb72869c4cabb9f1830aa8d04b5ab60cff98f0966d0cc8320ef8a764e22
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/ClipperTableAddon.json
- Size 187B
- SHA256 8e01006119e7c5fa18a5ee2c179bc7c2be840a35c3d64ee7107d2dab35ebf07d
- MD5 dfc1f7bb003ce16c130fc2ad6362bb9c
- SHA1 61a633aa2fd58c8ed0de6918a98694f9a4f8da12
- SHA512 3cb77c637fee6dd7c3bbda33e058c883e1fecf3d3891bf13fb75180e4e56d69c400f9f172c97f908d27874aff16b7a66f5fe21d5ba8d862719796c8a64588f65
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/CrashLoggerDesign.json
- Size 638B
- SHA256 1298a9a9b24708d6f0cb7d69880aed35713912be570dab1f55a4417a5a175137
- MD5 6e4480faac07c0ac376efc90544de056
- SHA1 b0aa2c58af36165e2084a58183c78616536619f0
- SHA512 201ec53d19187c744d7004aee1294f36cf391a780f5ce1263777195a3a4a308d343f03130569c9d3bb87e33c5ae05c9b00ab54c571d0c76bec8f9b02180c4867
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/CryptoStealerTableAddon.json
- Size 1KB
- SHA256 ea50120bf3c201b0faa08f6d3955635465d692a948e872febaad9a24a240b50a
- MD5 07b94d5cd38e29730e55158eef2b2d96
- SHA1 650b6acaa33a408fab1fa8db108223b1695caa76
- SHA512 a48d19de9b8d32d548abb9da8887bd09a1a03bf5dcec9f2cdb6b5f29ed3511a2043c97ae2c94711ae02f98714a8728e5f9341c49a1180ccdbcb915f23bd98b65
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/DeleteAll_legacy.json
- Size 505B
- SHA256 4ba6475a0a4c6c5066edf7e6804b3aea7f068158a5d4f6338cd588aabfb5761b
- MD5 9f362df9eae724c6fa1206150fa64a08
- SHA1 9ea82022a572b6453867cb5614cb1b4cf1a91a04
- SHA512 508fe38aa5745b1252784d95b6b0ca2dfcd3d7c9f42498693bc2eb5d651eed720abf518e21a943f6a6a4a0f0a15b2d5cab1a6ede11a11349e6b42a8ba269f013
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/FakeSteamWindowsControl.json
- Size 2KB
- SHA256 868d7fa7c022692501ab3a84708119f6ac768eba9105ba5fb916fc89e816ed9f
- MD5 62fd8e814077a73ab91eb488a8fe9782
- SHA1 47579957daa38f03b66539b8d64926fc705a90cf
- SHA512 7eac446d04e157e559d907aadbc2f04f192918bd33851d782083e30db2f6c70931ffa50ae85c55b3d21b8c98f2ef3fb81e355efa008a7412bd2ba6eacf61aa7e
- MD5 SHA1 SHA512
Score3/10 -
- Target v2dc/design/FileGrabberTableAddon.json
- Size 285B
- SHA256 22d5735285b207d83d2ff457bb08374286de6f6d947ae0c65a9cdc404353811a
- MD5 c12094143df7eea4fce65d9c32ce01d4
- SHA1 5178f2cddf82a98f2e2472a12580f36eb6cb2559
- SHA512 5852e83ff213d14b912b6fd868c6bd6d7f3dbc13d23fcea5dba068ad3c32e81f588c0cc26b0caae5e3713f3e0fd2de76b65e97ca0931091dc40b383beacebfa0
- MD5 SHA1 SHA512
Score3/10
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Change Default File Association
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Change Default File Association
1Scheduled Task/Job
1