Overview
overview
10Static
static
10Dangerous ...AT.exe
windows7-x64
10Dangerous ...AT.exe
windows10-2004-x64
10Dangerous ...nd.exe
windows7-x64
3Dangerous ...nd.exe
windows10-2004-x64
3Dangerous ...ox.dll
windows7-x64
1Dangerous ...ox.dll
windows10-2004-x64
1Dangerous ...og.rtf
windows7-x64
4Dangerous ...og.rtf
windows10-2004-x64
1Dangerous ...nd.exe
windows7-x64
3Dangerous ...nd.exe
windows10-2004-x64
3Dangerous ...ub.exe
windows7-x64
6Dangerous ...ub.exe
windows10-2004-x64
7Dangerous ...ub.exe
windows7-x64
3Dangerous ...ub.exe
windows10-2004-x64
3Dangerous ...ub.vbs
windows7-x64
1Dangerous ...ub.vbs
windows10-2004-x64
1Dangerous ...il.dll
windows7-x64
1Dangerous ...il.dll
windows10-2004-x64
1Dangerous ...io.dll
windows7-x64
1Dangerous ...io.dll
windows10-2004-x64
1Dangerous ...AN.exe
windows7-x64
1Dangerous ...AN.exe
windows10-2004-x64
1Dangerous ...df.exe
windows7-x64
3Dangerous ...df.exe
windows10-2004-x64
3Dangerous ...nt.dll
windows7-x64
3Dangerous ...nt.dll
windows10-2004-x64
3Dangerous ...nx.dll
windows7-x64
3Dangerous ...nx.dll
windows10-2004-x64
3Dangerous ...li.dll
windows7-x64
3Dangerous ...li.dll
windows10-2004-x64
3Dangerous ...Dc.dll
windows7-x64
1Dangerous ...Dc.dll
windows10-2004-x64
1Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20250207-en -
resource tags
arch:x64arch:x86image:win7-20250207-enlocale:en-usos:windows7-x64system -
submitted
25/02/2025, 15:30
Behavioral task
behavioral1
Sample
Dangerous RAT/Dangerous RAT.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Dangerous RAT/Dangerous RAT.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral3
Sample
Dangerous RAT/Extensions/Bind.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Dangerous RAT/Extensions/Bind.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral5
Sample
Dangerous RAT/FastColoredTextBox.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Dangerous RAT/FastColoredTextBox.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral7
Sample
Dangerous RAT/Kalogar_Online/Dell-12-30-2020/Keylog.rtf
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Dangerous RAT/Kalogar_Online/Dell-12-30-2020/Keylog.rtf
Resource
win10v2004-20250217-en
Behavioral task
behavioral9
Sample
Dangerous RAT/Kay/Bind.exe
Resource
win7-20250207-en
Behavioral task
behavioral10
Sample
Dangerous RAT/Kay/Bind.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral11
Sample
Dangerous RAT/Kay/Stub.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Dangerous RAT/Kay/Stub.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral13
Sample
Dangerous RAT/Kay/Stub.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Dangerous RAT/Kay/Stub.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral15
Sample
Dangerous RAT/Kay/Stub.vbs
Resource
win7-20241010-en
Behavioral task
behavioral16
Sample
Dangerous RAT/Kay/Stub.vbs
Resource
win10v2004-20250217-en
Behavioral task
behavioral17
Sample
Dangerous RAT/Mono.Cecil.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Dangerous RAT/Mono.Cecil.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral19
Sample
Dangerous RAT/NAudio.dll
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
Dangerous RAT/NAudio.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral21
Sample
Dangerous RAT/Plugin/AN.exe
Resource
win7-20241023-en
Behavioral task
behavioral22
Sample
Dangerous RAT/Plugin/AN.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral23
Sample
Dangerous RAT/Plugin/Adf.exe
Resource
win7-20250207-en
Behavioral task
behavioral24
Sample
Dangerous RAT/Plugin/Adf.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral25
Sample
Dangerous RAT/Plugin/Ant.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Dangerous RAT/Plugin/Ant.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral27
Sample
Dangerous RAT/Plugin/Anx.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Dangerous RAT/Plugin/Anx.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral29
Sample
Dangerous RAT/Plugin/Cli.dll
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
Dangerous RAT/Plugin/Cli.dll
Resource
win10v2004-20250217-en
Behavioral task
behavioral31
Sample
Dangerous RAT/Plugin/Dc.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
Dangerous RAT/Plugin/Dc.dll
Resource
win10v2004-20250217-en
General
-
Target
Dangerous RAT/Kay/Bind.exe
-
Size
33KB
-
MD5
98dca3c1bae7b12d90e05d56e23aab17
-
SHA1
4d0b3e9ef7f5e0d18bd8b97774963e89493c3494
-
SHA256
7b0d30222fd50ca8a4a5ea1af483e85ea7a332545b54344fc8fceb2e2fc2bfb9
-
SHA512
d8732a9c076f6f4d2fcce6c287705923b4f3983e0ce0381a419267c43f0b17d618e513f2981b7a033b0c546fe216671f4bb4ca1980dd7575da0ee8c7a3bbb8ca
-
SSDEEP
384:7L/Lu3GPLT8h16CnEkYuAu3tm9uuTMmv5Onuuuu/uuuuhuu7+sgPnEsU99uuEuu+:v63+SmnE55kQYd5c6s
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Bind.exe