Overview

overview

10

Static

static

10

a0b6d6d2e9...77.exe

windows7-x64

10

a0b6d6d2e9...77.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a0b6d6d2e94272dbcc21981b3da5b3f42f55a3b227d96edc99b60a41f19a5577.exe

  • Size

    1.0MB

  • Sample

    250214-nnry5svndz

  • MD5

    8bda1233f570302fead172d105df211c

  • SHA1

    50aad6a4bcede38d5b81c1597f4bbd65573ca468

  • SHA256

    a0b6d6d2e94272dbcc21981b3da5b3f42f55a3b227d96edc99b60a41f19a5577

  • SHA512

    a5f268e8e3358de09d78fb43c7102ccdcd6b5fe4518f22c9ff03a95b9bdb8ba4a0941c8c5f49b3e6218cb2963005c34ba4d55c88d376496c11bede2f42f8969c

  • SSDEEP

    12288:KIfbwPDpwTkiC2X8anaAZqVJCj6D2fJZSj+2O+AJzRhM:KIfbbbXnbZSK2O+AJzRhM

Score
10/10
darkvisiondiscoverypersistencerat

Malware Config

Targets

    • Target

      a0b6d6d2e94272dbcc21981b3da5b3f42f55a3b227d96edc99b60a41f19a5577.exe

    • Size

      1.0MB

    • MD5

      8bda1233f570302fead172d105df211c

    • SHA1

      50aad6a4bcede38d5b81c1597f4bbd65573ca468

    • SHA256

      a0b6d6d2e94272dbcc21981b3da5b3f42f55a3b227d96edc99b60a41f19a5577

    • SHA512

      a5f268e8e3358de09d78fb43c7102ccdcd6b5fe4518f22c9ff03a95b9bdb8ba4a0941c8c5f49b3e6218cb2963005c34ba4d55c88d376496c11bede2f42f8969c

    • SSDEEP

      12288:KIfbwPDpwTkiC2X8anaAZqVJCj6D2fJZSj+2O+AJzRhM:KIfbbbXnbZSK2O+AJzRhM

    Score
    10/10
    darkvisionratdiscoverypersistence

    • DarkVision Rat

      DarkVision Rat is a trojan written in C++.

      ratdarkvision

    • Darkvision family

      darkvision

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Deletes itself

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks