Overview

overview

10

Static

static

10

07e897a59a...3a.exe

windows7-x64

10

07e897a59a...3a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    07e897a59a6fe31ad946a6e91cb9a616a5480268a09d22e455dcf39c0c272a3a.exe

  • Size

    1.1MB

  • Sample

    240824-bcxzssxbnf

  • MD5

    56685241b6f88ad113277edbff88b433

  • SHA1

    de8678759ed96a3727550583530e2af5def62c47

  • SHA256

    07e897a59a6fe31ad946a6e91cb9a616a5480268a09d22e455dcf39c0c272a3a

  • SHA512

    e56084d0d6bca3900eb19cbce4536251acc1daf4bd8ce50bdaa054fe0d974fc85ee28d2df04ac4d113e2cc9ca0eeae53fc9cfcfb98f9ee417d70709699c99124

  • SSDEEP

    12288:2RZ+IoG/n9IQxW3OBseo9UJOMb92TSnuKGEFv6C9xUSpvAwn/CrvslD5TxutzquF:w2G/nvxW3WWt29FuKGEMGUSplr1yRF

Score
10/10
dcratdiscoveryinfostealerrat

Malware Config

Targets

    • Target

      07e897a59a6fe31ad946a6e91cb9a616a5480268a09d22e455dcf39c0c272a3a.exe

    • Size

      1.1MB

    • MD5

      56685241b6f88ad113277edbff88b433

    • SHA1

      de8678759ed96a3727550583530e2af5def62c47

    • SHA256

      07e897a59a6fe31ad946a6e91cb9a616a5480268a09d22e455dcf39c0c272a3a

    • SHA512

      e56084d0d6bca3900eb19cbce4536251acc1daf4bd8ce50bdaa054fe0d974fc85ee28d2df04ac4d113e2cc9ca0eeae53fc9cfcfb98f9ee417d70709699c99124

    • SSDEEP

      12288:2RZ+IoG/n9IQxW3OBseo9UJOMb92TSnuKGEFv6C9xUSpvAwn/CrvslD5TxutzquF:w2G/nvxW3WWt29FuKGEMGUSplr1yRF

    Score
    10/10
    dcratdiscoveryinfostealerrat

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • DCRat payload

      Detects payload of DCRat, commonly dropped by NSIS installers.

      rat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks