General

  • Target
    Dara-Tool-Portable.zip
  • Size 9.9MB
  • Sample260717-11tdysa161
  • SHA256 8683bfab16b59e30e964a5f354b816f64241e5b3c2c0ae3f9924190566e5363e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      Dara Tool.exe
    • Size 10KB
    • SHA256 0c8d3c2f04f81462e496d6b927150751b7cf32a303f7c2c8e0d5e4c425c4c1da
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Target
      daoc-live-radar\deploy_dara_admin_harness.ps1
    • Size 1KB
    • SHA256 af72391023d88e5199e211a1d3bfb7f26f62d54ee0bcd83a0f1dcc0020b2ae6c
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      daoc-live-radar\docs\recon\input-bridge\Dara Input Bridge.exe
    • Size 16KB
    • SHA256 7fd4eac642a40b14255893451b7b6fddf96906aaca0b06b4153b013c53c6a2da
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      daoc-live-radar\install_dara_admin_harness.ps1
    • Size 1KB
    • SHA256 a73e8d5e16727dc9c47a86aee1c2615db33f015df417e415cd51db5b73ff2b0f
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      daoc-live-radar\invoke_dara_admin_harness.ps1
    • Size 2KB
    • SHA256 dfa9616c68a1e2887fa36fab2be837b2af73806baa66d69b7db899c8e85350c7
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      daoc-live-radar\restart_input_bridge_admin.ps1
    • Size 1KB
    • SHA256 705a120bfc7e728dd55fe62415de66a47c6b0b356c795ac977e703ac136e9821
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    • Executes dropped EXE

    • Target
      daoc-live-radar\runtime\python\Lib\site-packages\capstone\__init__.py
    • Size 42KB
    • SHA256 6bc741ee656f346900fe808c272e10efd98f974e6767f560a2ed1d449aa63973
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      daoc-live-radar\runtime\python\Lib\site-packages\capstone\__pycache__\__init__.cpython-310.pyc
    • Size 25KB
    • SHA256 ced611272d50b51fa83287fcc5679764ac494a198a06228070ca706a46b51b2f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      daoc-live-radar\runtime\python\Lib\site-packages\capstone\__pycache__\arm.cpython-310.pyc
    • Size 2KB
    • SHA256 facd79243b8acd2a48dcf47d9a2442812eda3019fb20e89a1a1ab896b10cbb73
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      daoc-live-radar\runtime\python\Lib\site-packages\capstone\__pycache__\arm64.cpython-310.pyc
    • Size 3KB
    • SHA256 95632d79b1a783e0d61484be5365e526b3b0a64e915fdf74b1de1cce2284d2dc
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      daoc-live-radar\runtime\python\Lib\site-packages\capstone\__pycache__\arm64_const.cpython-310.pyc
    • Size 98KB
    • SHA256 9e6dcb5d6e18ed9339bb91f39a419102447fc5001dfd25f57aadaa062a1155b7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      daoc-live-radar\runtime\python\Lib\site-packages\capstone\__pycache__\arm_const.cpython-310.pyc
    • Size 21KB
    • SHA256 39b074c8690f7df3259367314fc2d92a87b248fb2c17665dc4b807300ff49f24
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      daoc-live-radar\runtime\python\Lib\site-packages\capstone\__pycache__\bpf.cpython-310.pyc
    • Size 2KB
    • SHA256 26bae17c905e13a678be69104f3fc12c1f2aa9d4305b751e976527b173e88c01
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      daoc-live-radar\runtime\python\Lib\site-packages\capstone\__pycache__\bpf_const.cpython-310.pyc
    • Size 2KB
    • SHA256 4d5c2bc4200b24aa902bab7f5cb30a24125d6d68ef0cc62533ea88fb6dfbb211
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      daoc-live-radar\runtime\python\Lib\site-packages\capstone\__pycache__\evm.cpython-310.pyc
    • Size 690B
    • SHA256 bc5357a9b818fd85edcfbe51230ae66d42c3d228b3a91bf8a320102d05ff8fc5
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      daoc-live-radar\runtime\python\Lib\site-packages\capstone\__pycache__\evm_const.cpython-310.pyc
    • Size 4KB
    • SHA256 2c2cb29e84b6ea2a7eeaaf03829b804567f12eea1ad5b91c361641c46061ab6d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

execution
Score
7/10

behavioral2

execution
Score
7/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

execution
Score
3/10

behavioral8

execution
Score
3/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
7/10

behavioral12

execution
Score
7/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10