Overview

overview

10

Static

static

10

2a9851860e...fa.exe

windows7-x64

10

2a9851860e...fa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    754dceb944cf505a0957e70370a972ef.bin

  • Size

    815KB

  • Sample

    241117-btnsfsslaq

  • MD5

    ba56d7d74b741b1dbda2b3419adc04da

  • SHA1

    8108fe5cfba9b027099ba7d389d0580de30549a0

  • SHA256

    ce956814bcddf7cbf645acc6d22818d54c77307540f2ac41dc5e980fc67abff6

  • SHA512

    2019dcc81fdbfa729173a4035c56d75a3251fc0a5df971458941bc9f9ab7251e7f2d0507dbc044c74d0673ba9765706aa37334f2205db1cd2dd8adb0f89077e2

  • SSDEEP

    24576:lYUjZ4sPnnuWhJ/ncmKZFdd/Xk4CIxUtzWvtHg:vjKs/v3/n8HL/U4C4UpoHg

Score
10/10
dcratinfostealerrat

Malware Config

Targets

    • Target

      2a9851860e7d245eadc3004f986afc3cec8c7bf2fc967fdfbca1e0a96b864efa.exe

    • Size

      1.2MB

    • MD5

      754dceb944cf505a0957e70370a972ef

    • SHA1

      c16e4782f0f2f868deff74d4bc76b528162f1fcc

    • SHA256

      2a9851860e7d245eadc3004f986afc3cec8c7bf2fc967fdfbca1e0a96b864efa

    • SHA512

      ad1ace193fdc6ba8dba7c11dacc9afc5420efd7dc45a0994bec8d12952e806488b3156b8ec346e6f13b7f66e9b0890e65791eecb1ed574383ca73ed5ab2a4568

    • SSDEEP

      12288:3F81ciMbLepD06qWmVoos41xTTnKYli3CaKyA/Ds5iE1kxuZcsWBYQ/7o+No9eLd:uciMa06q2YpE2yA/DFPxuBWBZCA

    Score
    10/10
    dcratinfostealerrat

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • Dcrat family

      dcrat

    • DCRat payload

      Detects payload of DCRat, commonly dropped by NSIS installers.

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks