Overview

overview

10

Static

static

10

ce191cd9d8...fb.exe

windows7-x64

10

ce191cd9d8...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce191cd9d8c381e453164242292163bcb9e1872dd752a9428366092a1971cafb

  • Size

    2.0MB

  • Sample

    241124-dzlamaxqhm

  • MD5

    060b04b16bc9af3252929fad74048b64

  • SHA1

    9b76b6592f9a32990f5bce6d1ff1825a28dc59d4

  • SHA256

    ce191cd9d8c381e453164242292163bcb9e1872dd752a9428366092a1971cafb

  • SHA512

    6178b9d5fb847ccd0f65302a187ecdbf3ffa01a89536500fcedb654c93b0205209b7a048eb990c7c2f35f157088032e9701d76d65ffd395cb9bbf398d894da46

  • SSDEEP

    24576:YOZGGptV5fRWyXchC98blumyLeUQUoJr3GBTSowqmGU12/Dje+qAcNZxOe2hc5cJ:YOZRptV5AbySUQUKzwLa1GG5AcNyN

Score
10/10
dcratinfostealerrat

Malware Config

Targets

    • Target

      ce191cd9d8c381e453164242292163bcb9e1872dd752a9428366092a1971cafb

    • Size

      2.0MB

    • MD5

      060b04b16bc9af3252929fad74048b64

    • SHA1

      9b76b6592f9a32990f5bce6d1ff1825a28dc59d4

    • SHA256

      ce191cd9d8c381e453164242292163bcb9e1872dd752a9428366092a1971cafb

    • SHA512

      6178b9d5fb847ccd0f65302a187ecdbf3ffa01a89536500fcedb654c93b0205209b7a048eb990c7c2f35f157088032e9701d76d65ffd395cb9bbf398d894da46

    • SSDEEP

      24576:YOZGGptV5fRWyXchC98blumyLeUQUoJr3GBTSowqmGU12/Dje+qAcNZxOe2hc5cJ:YOZRptV5AbySUQUKzwLa1GG5AcNyN

    Score
    10/10
    dcratinfostealerrat

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • Dcrat family

      dcrat

    • DCRat payload

      Detects payload of DCRat, commonly dropped by NSIS installers.

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks