Analysis
-
max time kernel
96s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
07/08/2024, 03:26
General
-
Target
d376db4ae3c3854427f2b69595c355ae1e8dd11997f714f90dd3eb8c58df3f2c.exe
-
Size
1.2MB
-
MD5
8bbad7aa318a6e95bd63e05664fbceaa
-
SHA1
25e513cf5b2490fbed57ab1fc6f2f8be9bda4ef6
-
SHA256
d376db4ae3c3854427f2b69595c355ae1e8dd11997f714f90dd3eb8c58df3f2c
-
SHA512
5b7c126988d362ff0c18a6bab92842f18b915c903f85fa220bda9cb627f59ebca6c8b33ca6ed9aea1e860571f14c5087a8d967dfc3060bd2f411de0785ba7779
-
SSDEEP
24576:+WrshqMKmDxcMZuFTLnqZlRXPiePrUYCoVfKg:Rg1Ksz/iHqK
Score
10/10
Malware Config
Signatures
-
DcRat
DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.
-
DCRat payload 1 IoCs
Detects payload of DCRat, commonly dropped by NSIS installers.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d376db4ae3c3854427f2b69595c355ae1e8dd11997f714f90dd3eb8c58df3f2c.exe"C:\Users\Admin\AppData\Local\Temp\d376db4ae3c3854427f2b69595c355ae1e8dd11997f714f90dd3eb8c58df3f2c.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
112KB
-
Filesize
320KB
-
Filesize
88KB
-
Filesize
56KB
-
Filesize
1.2MB