General
- Target SolaraB.exe
- Size 1.4MB
- Sample240706-tnbj2sthpp
- SHA256 3a45f3eeb50019496878de2b1042b27fdf54edfa6082ebe290d9c47a26347725
Score
10/10
Malware Config
Targets
-
- Target SolaraB.exe
- Size 1.4MB
- SHA256 3a45f3eeb50019496878de2b1042b27fdf54edfa6082ebe290d9c47a26347725
Score10/10-
DcRat
DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.
-
DCRat payload
Detects payload of DCRat, commonly dropped by NSIS installers.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL