Extracted

• • Target

    first-crypted.exe

  • Size

    506KB

  • MD5

    00bd099a7d2e003d4a0a5770209e211c

  • SHA1

    ddf9433704d1f6e370df4e6f2a298ca35c0ccb8f

  • SHA256

    05ab828d679c46e5ff03d3eba12474ef40342e25cffdb2ac967b7ebd81f188fe

  • SHA512

    b29cffbbc3f8add6ca15ae22869712b3f10126492dc870163024682b7af105f4ae8a35838695494616440be99c0efd2f4e7e626e53b96a070015793431480883

  • SSDEEP

    12288:7k2Jnp/pxuJSXde2cnr7zgmMAnnnnnnnnnnn+1111hWvjY:7Tnl7uJbznzgsnnnnnnnnnnn+1Bh5

  Score

  10^/10

  darkvisionrat

  • DarkVision Rat

    DarkVision Rat is a trojan written in C++.

    ratdarkvision

  • Darkvision family

    darkvision

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1