General

  • Target
    1.exe
  • Size 33.2MB
  • Sample251119-n4phystmcj
  • SHA256 bbbc2a56ba69aefa567dbffe1982e21c7317e305741f7027cd0975c4bf79f8df
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • darktrack

C2
  • wwwyandex.org:112233

Targets

    • Target
      1.exe
    • Size 33.2MB
    • SHA256 bbbc2a56ba69aefa567dbffe1982e21c7317e305741f7027cd0975c4bf79f8df
    • MD5 SHA1 SHA512 SSDEEP
    • DarkTrack

      DarkTrack is a remote administration tool written in delphi.

    • DarkTrack payload

    • Darktrack family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks