Extracted

• • Target
    .Purchase Order-090CT2026-3.exe
  • Size 178KB
  • SHA256 c3b68be31c19ad0c213d3054bd005bd91732f8acf6128bb668801102e28cf74f
  • MD5 cd2a98e0feb5c7971750bf9fe9c2d5db
  • SHA1 bb51fad1e22b6c4172dd1c0b00c9d9f9bff6d8da
  • SHA512 1bf23c2366dfb42cb705ccb292c6da113b6adb7c4e22e35254c1fa1cf8d82aac13e6b9fd309af4021022dad7a6215cc4c45f2b5bff061f0aef7c5d24a78bf665
  • SSDEEP 3072:VT9+rborcBMxJ8mCgXObKTey+Ey8khRjj6dBHDy++2R:L0boTwqX9+EydDKJX
  • TLSH
    T1E3040756B698C3BBC0659375C4620AF2AB717C15DA20478F3360BE493F32B909EF9B05
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  darkvisionrat

  • DarkVision Rat

    DarkVision Rat is a trojan written in C++.

    ratdarkvision

  • Darkvision family

    darkvision

  • Suspicious use of SetThreadContext

  behavioral1
• • Target
    mpclient.dll
  • Size 3.5MB
  • SHA256 0f37eee4d4275fc7efa95d63538a679085e89541d085d771abb03d1c2a704a12
  • MD5 857a996c4ea5521fcbffb333961f5ac0
  • SHA1 2e6f0555fb32208f8459001ccee22bf05dede907
  • SHA512 2e5613a22ce96e1ddbb7712aa9a41da7a73e7ef20498b8f13c05ba41d5d7dcda4a64171f474b9cffc436773af75e806e7c95434e796ff3261cfad22c7e0aa8aa
  • SSDEEP 98304:TmCua89fE1o3gzDxM+tNXLJkrxI77NBa0dmTZS8nX5x0c07dFT+4cV7uyY1B5bc:Tzuf9E0gfxBN7Jkrg7falY8nX5xQ7dFB
  • TLSH
    T17206BF8673C47AD9C506DD3AA714F232C1A3A9338EB7A0C66D97D34A4AB69510F3DF40
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral2behavioral3