General
-
Target
DCRatBuild.exe
-
Size
1.9MB
-
Sample
250102-wg6gyszndw
-
MD5
4b61a00f5577de5a7ee8567df7493cce
-
SHA1
99a5213aa902c60d51b91e109060888155c38216
-
SHA256
c605ffe0512bb5accf0d1eae0b0e3642734bd6af198ec97c584e56f4b0ef16a1
-
SHA512
5dc268fb96f453f4143e01a31ccb5496cdcf3ad22a45a0fa5326fd2e888ee8114ec546ef21cf6c21c3a044497e7c54635bb93d5c11d368b533ce78b01f204ba1
-
SSDEEP
24576:2TbBv5rUyXVDI0yOyS/zqhGaicQCSIHs2VF2r3Gdi4d8bC/HxGu2AA4VsXaaWsLh:IBJkzS/daDsz74GG/RGubA2sX8sLVP
Static task
static1
Behavioral task
behavioral1
Sample
DCRatBuild.exe
Resource
win11-20241007-en
Malware Config
Targets
-
-
Target
DCRatBuild.exe
-
Size
1.9MB
-
MD5
4b61a00f5577de5a7ee8567df7493cce
-
SHA1
99a5213aa902c60d51b91e109060888155c38216
-
SHA256
c605ffe0512bb5accf0d1eae0b0e3642734bd6af198ec97c584e56f4b0ef16a1
-
SHA512
5dc268fb96f453f4143e01a31ccb5496cdcf3ad22a45a0fa5326fd2e888ee8114ec546ef21cf6c21c3a044497e7c54635bb93d5c11d368b533ce78b01f204ba1
-
SSDEEP
24576:2TbBv5rUyXVDI0yOyS/zqhGaicQCSIHs2VF2r3Gdi4d8bC/HxGu2AA4VsXaaWsLh:IBJkzS/daDsz74GG/RGubA2sX8sLVP
Score10/10-
DcRat
DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.
-
Dcrat family
-
Executes dropped EXE
-