General

  • Target

    STUB.EXE

  • Size

    276KB

  • Sample

    250208-d4v1masqc1

  • MD5

    174e6546670f0af8e183d8c8511a41da

  • SHA1

    05ef361696759d5441186f0b08d0ac3a89c2a80d

  • SHA256

    dedbb7f79d01321a6f6f0274520dec5465d0a41d93f5839b5935084eb90b2462

  • SHA512

    8b24cc4bd9a3a6dd679424c97cc01c22883a14db6fef0fe7d4874b42ab03d7a4b129026fc8019947f675c83ea1a8654e8bcabfa0e84a8a093976fbd1a33d02f6

  • SSDEEP

    3072:rrDyh1bdjkWxF/1PVg88WRhgEr1yNhT2xE/3MW7o4+W95nBKq5Epr1R:uhhJDFgX3Er8PTAE/3JR5gqa

Malware Config

Extracted

Family

darkvision

C2

195.88.218.126

Targets

    • Target

      STUB.EXE

    • Size

      276KB

    • MD5

      174e6546670f0af8e183d8c8511a41da

    • SHA1

      05ef361696759d5441186f0b08d0ac3a89c2a80d

    • SHA256

      dedbb7f79d01321a6f6f0274520dec5465d0a41d93f5839b5935084eb90b2462

    • SHA512

      8b24cc4bd9a3a6dd679424c97cc01c22883a14db6fef0fe7d4874b42ab03d7a4b129026fc8019947f675c83ea1a8654e8bcabfa0e84a8a093976fbd1a33d02f6

    • SSDEEP

      3072:rrDyh1bdjkWxF/1PVg88WRhgEr1yNhT2xE/3MW7o4+W95nBKq5Epr1R:uhhJDFgX3Er8PTAE/3JR5gqa

    • DarkVision Rat

      DarkVision Rat is a trojan written in C++.

    • Darkvision family

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks