General

  • Target

    Dcrat.exe

  • Size

    57.9MB

  • Sample

    240627-g7hq9aygpr

  • MD5

    f09f04fbe7b73eb6454ade6a21d13d79

  • SHA1

    710e4041215d8a79ea7036e1c53c5825f623e9ff

  • SHA256

    3f6eaebd4eba3f7a2530e1395ff928b9e247d12907200d496ea676daf0fd4976

  • SHA512

    257660b03d92a7c9856b6219f8c98216dc38c24ad550cb746233994610dda58257fbb124975da02709bfabbb75809bb2b46573ffd93a7978018e2be6c8784854

  • SSDEEP

    1572864:zU/gsQUMAhRnOPrONJ0Vl4FdfE7tZd9WbECk4DnQ:zUIsJMAhBOycVlyy9ejN

Score
7/10

Malware Config

Targets

    • Target

      Dcrat.exe

    • Size

      57.9MB

    • MD5

      f09f04fbe7b73eb6454ade6a21d13d79

    • SHA1

      710e4041215d8a79ea7036e1c53c5825f623e9ff

    • SHA256

      3f6eaebd4eba3f7a2530e1395ff928b9e247d12907200d496ea676daf0fd4976

    • SHA512

      257660b03d92a7c9856b6219f8c98216dc38c24ad550cb746233994610dda58257fbb124975da02709bfabbb75809bb2b46573ffd93a7978018e2be6c8784854

    • SSDEEP

      1572864:zU/gsQUMAhRnOPrONJ0Vl4FdfE7tZd9WbECk4DnQ:zUIsJMAhBOycVlyy9ejN

    Score
    7/10
    • Drops startup file

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks