Overview

overview

10

Static

static

10

fb5367f8bb...91.exe

windows7-x64

10

fb5367f8bb...91.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb5367f8bb53061f6f21c41b0105b7d6dcc57597a0e12190e5aae0c247d50891.exe

  • Size

    2.0MB

  • Sample

    241206-kw7g1svqen

  • MD5

    798390f2a10a8c87e2a8db5805256d76

  • SHA1

    7ae8108ca1be199eff1a2080343911b66e347a7f

  • SHA256

    fb5367f8bb53061f6f21c41b0105b7d6dcc57597a0e12190e5aae0c247d50891

  • SHA512

    26f3bb170b58ddefc787db5798ea3f17c604e7f474e214572fb60cc08d809af4c97f04d642c2828c6e07b83cf955adbe48bfd0050eb854012444487c3e099ecb

  • SSDEEP

    49152:jrYU+Yy4J8jao9UVlWAOjhRzsiYHjo++xTND:jdxVJC9UqRzsu+8ND

Score
10/10
dcratinfostealerrat

Malware Config

Targets

    • Target

      fb5367f8bb53061f6f21c41b0105b7d6dcc57597a0e12190e5aae0c247d50891.exe

    • Size

      2.0MB

    • MD5

      798390f2a10a8c87e2a8db5805256d76

    • SHA1

      7ae8108ca1be199eff1a2080343911b66e347a7f

    • SHA256

      fb5367f8bb53061f6f21c41b0105b7d6dcc57597a0e12190e5aae0c247d50891

    • SHA512

      26f3bb170b58ddefc787db5798ea3f17c604e7f474e214572fb60cc08d809af4c97f04d642c2828c6e07b83cf955adbe48bfd0050eb854012444487c3e099ecb

    • SSDEEP

      49152:jrYU+Yy4J8jao9UVlWAOjhRzsiYHjo++xTND:jdxVJC9UqRzsu+8ND

    Score
    10/10
    dcratinfostealerrat

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • Dcrat family

      dcrat

    • DCRat payload

      Detects payload of DCRat, commonly dropped by NSIS installers.

      rat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks