Extracted

• • Target

    Mine/firsgen.exe

  • Size

    453KB

  • MD5

    67a359e34ca0da8d1b51b3dbacc0e4bc

  • SHA1

    5bb23dec795b3c7cd1cf9e3563834e14f9f3344c

  • SHA256

    443c327eae304c70f48625b1b919fb9a2d89ce529f21251968baea487d3d9f94

  • SHA512

    57ebc64d7a039c392cbab65df3fba8ffe260e2997d0c787c69a4633a37a67188312eb14f43e40171871d22298dbb54142c88a6badf956777be9506acb2169a08

  • SSDEEP

    6144:+MdVKz+LuaBM4/1qrbbYTsHYU6Aez8HVWI8:LLXqrH+R+T

  Score

  10^/10

  darkvisionexecutionrat

  • DarkVision Rat

    DarkVision Rat is a trojan written in C++.

    ratdarkvision

  • Darkvision family

    darkvision

  • Command and Scripting Interpreter: PowerShell

    Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    execution

  • Executes dropped EXE

  behavioral1