Overview

overview

10

Static

static

3

a529197912...4N.exe

windows7-x64

10

a529197912...4N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a5291979129ded5f9d4e74deed3b2b68d8116f92cd5429ce47301cd727971b04N.exe

  • Size

    2.0MB

  • Sample

    250205-tc816stjgt

  • MD5

    9dacfc9d6a218957387e1beccc9bc670

  • SHA1

    f52fb040aad686ff8bde1c5e7f4f382332a988a7

  • SHA256

    a5291979129ded5f9d4e74deed3b2b68d8116f92cd5429ce47301cd727971b04

  • SHA512

    062e71b6f27ed4feb004a5ecd2eb7b938f3aef18209bff0b6150a765c0eab6c30c4cc8a694735c4e0d033b8ffa222e199ae7699d4fae0c9d19d5d24d68201e9d

  • SSDEEP

    24576:N3s6IAVPf6cr+jZRRGjzpRjns1NpJz8jEQ0tg284YVv9baETptpGntxvboFDQvWl:FjUQjzTbs1NpJzg0tg2G9bZpUt1mD

Score
10/10
dcratdiscoveryinfostealerrat

Malware Config

Targets

    • Target

      a5291979129ded5f9d4e74deed3b2b68d8116f92cd5429ce47301cd727971b04N.exe

    • Size

      2.0MB

    • MD5

      9dacfc9d6a218957387e1beccc9bc670

    • SHA1

      f52fb040aad686ff8bde1c5e7f4f382332a988a7

    • SHA256

      a5291979129ded5f9d4e74deed3b2b68d8116f92cd5429ce47301cd727971b04

    • SHA512

      062e71b6f27ed4feb004a5ecd2eb7b938f3aef18209bff0b6150a765c0eab6c30c4cc8a694735c4e0d033b8ffa222e199ae7699d4fae0c9d19d5d24d68201e9d

    • SSDEEP

      24576:N3s6IAVPf6cr+jZRRGjzpRjns1NpJz8jEQ0tg284YVv9baETptpGntxvboFDQvWl:FjUQjzTbs1NpJzg0tg2G9bZpUt1mD

    Score
    10/10
    dcratinfostealerratdiscovery

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

      ratinfostealerdcrat

    • Dcrat family

      dcrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks