General
- Target SolaraB.exe
- Size 1.4MB
- Sample240706-tnbj2sthpp
- SHA256 3a45f3eeb50019496878de2b1042b27fdf54edfa6082ebe290d9c47a26347725
Score
10/10
Malware Config
Targets
-
- Target SolaraB.exe
- Size 1.4MB
- SHA256 3a45f3eeb50019496878de2b1042b27fdf54edfa6082ebe290d9c47a26347725
Score10/10DcRat
DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.
DCRat payload
Detects payload of DCRat, commonly dropped by NSIS installers.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL