sparkrat | hxxps://fylio[.]com/d/7ad713ba-3e5e-4714-8355-500f40e44d40

- Target
  https://fylio.com/d/7ad713ba-3e5e-4714-8355-500f40e44d40
Score

10^/10

discovery antivm backdoor sparkrat
- Detects SparkRAT payload
- Family: Sparkrat
  Sparkrat is a cross-platfrom backdoor written in Golang.
  backdoor sparkrat
- family_sparkrat
  Detects Sparkrat payload
- Checks hardware identifiers (DMI)
  Checks DMI information which indicate if the system is a virtual machine.
  antivm
- Reads hardware information
  Accesses system info like serial numbers, manufacturer names etc.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Virtualization/Sandbox Evasion

T1497

System Checks

T1497.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Detects SparkRAT payload

Family: Sparkrat

family_sparkrat

Checks hardware identifiers (DMI)

Reads hardware information

MITRE ATT&CK Enterprise v16

Tasks

static1

urlscan1

behavioral1

behavioral2