Analysis
- max time kernel
141s - max time network
101s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
- submitted
13/09/2024, 16:50
General
- Target unpacked.exe
- Size 611KB
- Sample240913-vclrbaxenq
- SHA256 99c5e639d2577a3671754bb206272d1c266fb96fe62f0d1a58c7cf72a44ddee7
Score
10/10
Malware Config
Signatures
- DarkTrack
DarkTrack is a remote administration tool written in delphi.
- DarkTrack payload 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\unpacked.exe"C:\Users\Admin\AppData\Local\Temp\unpacked.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3280-0-0x0000000000400000-0x00000000004A4000-memory.dmp