Overview

overview

10

Static

static

3

SbieDll.dll

windows10-2004-x64

10

SbieDll.dll

windows11-21h2-x64

10

concrt141.dll

windows10-2004-x64

1

concrt141.dll

windows11-21h2-x64

1

documents.exe

windows10-2004-x64

10

documents.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    61e90bea8ad582b3d90b77bab72272d8d2a065bf8d4dcd9ab56a784c0b30e984.zip
  • Size 6.3MB
  • Sample260310-d45vtscz9r
  • SHA256 61e90bea8ad582b3d90b77bab72272d8d2a065bf8d4dcd9ab56a784c0b30e984
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
darkvisionrat

Malware Config

Extracted

Family

  • darkvision

C2

  • 45.88.91.153

Targets

    • Target
      SbieDll.dll
    • Size 15.3MB
    • SHA256 3dc05b03fc11fe228486d38af6f83e9ccd178e67826e7bb594a8fb8f10840769
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    darkvisionrat

    • DarkVision Rat

      DarkVision Rat is a trojan written in C++.

      ratdarkvision

    • Darkvision family

      darkvision

    • Suspicious use of SetThreadContext

    behavioral1behavioral2
    • Target
      concrt141.dll
    • Size 468KB
    • SHA256 2e0af9d06be5fc284b15fbc99001c38bc4df012abda00a03b8d70e0b9ecfcfcb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      documents.exe
    • Size 119KB
    • SHA256 39cd0acf3f09b635c0d1324e3245cee6bbfa5301b3d319b53fcfea660414e07b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    darkvisionrat

    • DarkVision Rat

      DarkVision Rat is a trojan written in C++.

      ratdarkvision

    • Darkvision family

      darkvision

    • Suspicious use of SetThreadContext

    behavioral5behavioral6

MITRE ATT&CK Matrix

Tasks