Overview

overview

10

Static

static

3

062c124b7a...5a.exe

windows7-x64

10

062c124b7a...5a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    062c124b7a6d9297d4ed689b6cf8f30255153fe57bab1df94017823c96f1045a.exe

  • Size

    2.0MB

  • Sample

    250204-xswbssxnft

  • MD5

    43556ce01d23dee540a9c00a895478fa

  • SHA1

    04a78efa3659b2a3123432c6066858edf9d97ca6

  • SHA256

    062c124b7a6d9297d4ed689b6cf8f30255153fe57bab1df94017823c96f1045a

  • SHA512

    c0a9a9e62732bc945f2a3f458d4cc453eb9fcdb9b125b9c76e13bcfc9c41e84b04dfc4d66b691ca6c6ec35f8663449bea3f9281d5e3fb7346cb85bbd0926f290

  • SSDEEP

    24576:N3s6IAVPf6cr+jZRRGjzpRjns1NpJz8jEQ0tg284YVv9baETptpGntxvboFDQvWs:FjUQjzTbs1NpJzg0tg2G9bZpUt1mDo

Score
10/10
dcratdiscoveryinfostealerrat

Malware Config

Targets

    • Target

      062c124b7a6d9297d4ed689b6cf8f30255153fe57bab1df94017823c96f1045a.exe

    • Size

      2.0MB

    • MD5

      43556ce01d23dee540a9c00a895478fa

    • SHA1

      04a78efa3659b2a3123432c6066858edf9d97ca6

    • SHA256

      062c124b7a6d9297d4ed689b6cf8f30255153fe57bab1df94017823c96f1045a

    • SHA512

      c0a9a9e62732bc945f2a3f458d4cc453eb9fcdb9b125b9c76e13bcfc9c41e84b04dfc4d66b691ca6c6ec35f8663449bea3f9281d5e3fb7346cb85bbd0926f290

    • SSDEEP

      24576:N3s6IAVPf6cr+jZRRGjzpRjns1NpJz8jEQ0tg284YVv9baETptpGntxvboFDQvWs:FjUQjzTbs1NpJzg0tg2G9bZpUt1mDo

    Score
    10/10
    dcratdiscoveryinfostealerrat

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • Dcrat family

      dcrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks