Overview

overview

10

Static

static

3

SbieDll.dll

windows10-2004-x64

10

SbieDll.dll

windows11-21h2-x64

10

bulk quick...25.exe

windows10-2004-x64

10

bulk quick...25.exe

windows11-21h2-x64

10

concrt141.dll

windows10-2004-x64

1

concrt141.dll

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    9e7c4e0e46ef8f33fc434985fad8b70956ece9bc83689b46ef264159f48209ba
  • Size 6.3MB
  • Sample260310-exdcnsay9w
  • SHA256 9e7c4e0e46ef8f33fc434985fad8b70956ece9bc83689b46ef264159f48209ba
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
darkvisionrat

Malware Config

Extracted

Family

  • darkvision

C2

  • 45.88.91.153

Targets

    • Target
      SbieDll.dll
    • Size 15.3MB
    • SHA256 0b2f7eb45c4eede5a3cfe9d47ce56865caaac0339b345fd0801611e93db665de
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    darkvisionrat

    • DarkVision Rat

      DarkVision Rat is a trojan written in C++.

      ratdarkvision

    • Darkvision family

      darkvision

    • Suspicious use of SetThreadContext

    behavioral1behavioral2
    • Target
      bulk quick order 2025.exe
    • Size 119KB
    • SHA256 39cd0acf3f09b635c0d1324e3245cee6bbfa5301b3d319b53fcfea660414e07b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    darkvisionrat

    • DarkVision Rat

      DarkVision Rat is a trojan written in C++.

      ratdarkvision

    • Darkvision family

      darkvision

    • Suspicious use of SetThreadContext

    behavioral3behavioral4
    • Target
      concrt141.dll
    • Size 468KB
    • SHA256 2e0af9d06be5fc284b15fbc99001c38bc4df012abda00a03b8d70e0b9ecfcfcb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Matrix

Tasks