Overview

overview

10

Static

static

10

3049dff59c...44.exe

windows7-x64

10

3049dff59c...44.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3049dff59c007e4d95714d9e75a74a50e0ce1e012c0ea0e8dd0c4d457d99bf44.exe

  • Size

    2.4MB

  • Sample

    240829-sfc78szcpj

  • MD5

    7e92b919f0d413c201afd73a1206a471

  • SHA1

    d232d9e8c0d0bac4706a9ed3fcfb0c29f3411bb3

  • SHA256

    3049dff59c007e4d95714d9e75a74a50e0ce1e012c0ea0e8dd0c4d457d99bf44

  • SHA512

    637be3540335aa36da564d41eafb1f57b3ae975f17d977905b72a90572bf7beda660187887600e36cb0f1ff579eaaa95d1d7de4ebbd24bccc70d8e75bf1e1260

  • SSDEEP

    49152:YnKY/LDpwDbG4PgI8l0muhENyOdPazXijeJ38T:Yb/Lie4oaZhE4ipe+T

Score
10/10
dcratinfostealerrat

Malware Config

Targets

    • Target

      3049dff59c007e4d95714d9e75a74a50e0ce1e012c0ea0e8dd0c4d457d99bf44.exe

    • Size

      2.4MB

    • MD5

      7e92b919f0d413c201afd73a1206a471

    • SHA1

      d232d9e8c0d0bac4706a9ed3fcfb0c29f3411bb3

    • SHA256

      3049dff59c007e4d95714d9e75a74a50e0ce1e012c0ea0e8dd0c4d457d99bf44

    • SHA512

      637be3540335aa36da564d41eafb1f57b3ae975f17d977905b72a90572bf7beda660187887600e36cb0f1ff579eaaa95d1d7de4ebbd24bccc70d8e75bf1e1260

    • SSDEEP

      49152:YnKY/LDpwDbG4PgI8l0muhENyOdPazXijeJ38T:Yb/Lie4oaZhE4ipe+T

    Score
    10/10
    dcratinfostealerrat

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • DCRat payload

      Detects payload of DCRat, commonly dropped by NSIS installers.

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks