Overview

overview

10

Static

static

10

fb42560380...9c.exe

windows7-x64

10

fb42560380...9c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb4256038010fac2182f060deffaa1ffe0ce66f55ad4ed328e30465522f9c79c.exe

  • Size

    736KB

  • Sample

    241002-b5d3ds1dkl

  • MD5

    8dd93bb163b1658947ad6c63b79ad36f

  • SHA1

    1d0ac0d640c7fcdf5f8641b8598777a42b9fecff

  • SHA256

    fb4256038010fac2182f060deffaa1ffe0ce66f55ad4ed328e30465522f9c79c

  • SHA512

    62956e65d74fc82c053314e6c9d2bde8efd036b0be8f5591161bde951eb7bc346b195e59289ebd466c18e7c0227619d6bd5b0314e7ed3d7415beaae03d3d5670

  • SSDEEP

    12288:kATnF3pDw8Ji1OGaNeqALaJJMA+UiXPrQfkXmm1RhdLB9XGbHJnZ6:kATngKqqALEJMA+yEqX6

Score
10/10
dcratdiscoveryinfostealerratspywarestealer

Malware Config

Targets

    • Target

      fb4256038010fac2182f060deffaa1ffe0ce66f55ad4ed328e30465522f9c79c.exe

    • Size

      736KB

    • MD5

      8dd93bb163b1658947ad6c63b79ad36f

    • SHA1

      1d0ac0d640c7fcdf5f8641b8598777a42b9fecff

    • SHA256

      fb4256038010fac2182f060deffaa1ffe0ce66f55ad4ed328e30465522f9c79c

    • SHA512

      62956e65d74fc82c053314e6c9d2bde8efd036b0be8f5591161bde951eb7bc346b195e59289ebd466c18e7c0227619d6bd5b0314e7ed3d7415beaae03d3d5670

    • SSDEEP

      12288:kATnF3pDw8Ji1OGaNeqALaJJMA+UiXPrQfkXmm1RhdLB9XGbHJnZ6:kATngKqqALEJMA+yEqX6

    Score
    10/10
    dcratdiscoveryinfostealerratspywarestealer

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • DCRat payload

      rat

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks