Overview

overview

7

Static

static

1

DarkOrbitI...1).exe

windows7-x64

7

DarkOrbitI...1).exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DarkOrbitInstaller.755.168209496 (1).exe

  • Size

    24.3MB

  • Sample

    240727-3ydltswanm

  • MD5

    f25ba436f0a55388313d25b3ad9446c1

  • SHA1

    82b7d99b06ce79aa3a4179f14a4d5b9d32c0397c

  • SHA256

    394bf7387473fdb3c022185da7d5c27e1272ed3de42004aa86e4dfdc3971309d

  • SHA512

    f05ba43930321d14036a7e127f8aa55d3fd47dcc462eb178d2882c270a92968c322899b8c39beae5077c4f58565769544613fb3a9c0b65a0151ace64ab572a22

  • SSDEEP

    393216:KXzIfGITSl9QuPeiJu9ngXuxXEWPMA7To3EjHRZ5nBoUbPpXOqAi8tJsv6tWKFdY:s0uQf5hU7sX7

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      DarkOrbitInstaller.755.168209496 (1).exe

    • Size

      24.3MB

    • MD5

      f25ba436f0a55388313d25b3ad9446c1

    • SHA1

      82b7d99b06ce79aa3a4179f14a4d5b9d32c0397c

    • SHA256

      394bf7387473fdb3c022185da7d5c27e1272ed3de42004aa86e4dfdc3971309d

    • SHA512

      f05ba43930321d14036a7e127f8aa55d3fd47dcc462eb178d2882c270a92968c322899b8c39beae5077c4f58565769544613fb3a9c0b65a0151ace64ab572a22

    • SSDEEP

      393216:KXzIfGITSl9QuPeiJu9ngXuxXEWPMA7To3EjHRZ5nBoUbPpXOqAi8tJsv6tWKFdY:s0uQf5hU7sX7

    Score
    7/10
    discoveryspywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks