General
- Target allcheats.exe
- Size 23.6MB
- Sample260703-wc8fradv4v
- SHA256 988c23d85f7828b1269e9752fb7081fed4c51257126fe5c3329224e1ff4f5c90
Score
10/10
Malware Config
Targets
-
- Target allcheats.exe
- Size 23.6MB
- SHA256 988c23d85f7828b1269e9752fb7081fed4c51257126fe5c3329224e1ff4f5c90
Score10/10-
Detects DarkSideRAT
-
Family: DarkSideRAT
DarkSideRAT is a remote access trojan.
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target wostora22.pyc
- Size 16B
- SHA256 c16eb7cd27cfd33fc5e84450eb79893e5bad279398f59f2d0692c90f884b56fa
Score3/10