Extracted

• • Target

    b8b7b90f809c36e29fe4d072c3ca58fff5333387c5e85baf91b082483518c102

  • Size

    604KB

  • MD5

    96683133ad494eeb2dc33d1c68e02582

  • SHA1

    e10ddd945f7fade315489cc40a5654ba5cb2c672

  • SHA256

    b8b7b90f809c36e29fe4d072c3ca58fff5333387c5e85baf91b082483518c102

  • SHA512

    391ac2ae9f0127931c496edf9b680347edd8dfd970986dbb8e505098e4423693537e0f724cccfed6c6789de170bb540b51d32676f7883a654313dd9009ba7a9b

  • SSDEEP

    6144:yXFFYLsH/0r7Ys1MFNjNIeGVOn0i511Z1VxOBNq5+iZuo3LZoagvYXni4kEIlFJt:yLYgHsg5F0I11Z1pHbZv4u6lFuo

  Score

  10^/10

  darkvisiondiscoverypersistencerat

  • DarkVision Rat

    DarkVision Rat is a trojan written in C++.

    ratdarkvision

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2