dcrat | 452d26d137fca80254371658108f671a51310afed93306777b48a3c95c24a699

Sharing

Copy URL Twitter E-mail

General

Target
DarkCrystalRat.7z
Size 65.6MB
Sample260720-bw8kmsbw5j
SHA256 452d26d137fca80254371658108f671a51310afed93306777b48a3c95c24a699
MD5 154f12fa099c6c5e4a75a1342298b799
SHA1 aafd6ef314486ad684b4aa53c392c3ba67014381
SHA512 24e92d741856a0cd0bf5a8597889619c8c683d318e25d2a7a2b003cc16d32020153f8eefbaf4d6e09613f8e357ad0aee5d6a29cf1898003accb7bdcc8a131eba
SSDEEP 1572864:lqXpJ/WMY9HcLrFHd9OyXSm5M/pj+9cdI4ecFghNv086:4pJIHcLrN/S3/WAecFgG
TLSH
T1A1E733CE8C8DFA60FEA84F40DA405BB5E0C5747080E5A9FA951E9CF78DDB6128DF1416
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  DarkCrystalRat.7z
- Size 65.6MB
- SHA256 452d26d137fca80254371658108f671a51310afed93306777b48a3c95c24a699
- MD5 154f12fa099c6c5e4a75a1342298b799
- SHA1 aafd6ef314486ad684b4aa53c392c3ba67014381
- SHA512 24e92d741856a0cd0bf5a8597889619c8c683d318e25d2a7a2b003cc16d32020153f8eefbaf4d6e09613f8e357ad0aee5d6a29cf1898003accb7bdcc8a131eba
- SSDEEP 1572864:lqXpJ/WMY9HcLrFHd9OyXSm5M/pj+9cdI4ecFghNv086:4pJIHcLrN/S3/WAecFgG
- TLSH
  T1A1E733CE8C8DFA60FEA84F40DA405BB5E0C5747080E5A9FA951E9CF78DDB6128DF1416
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  DCRat/plugins/Audio_native.plg
- Size 134B
- SHA256 90aef04ca6ae7221a44b45e50d8a9a9e1bff6e4ed17c5883fe0c6560c8db5206
- MD5 8ac7b72bc99bf0963d72f1e6f5cb3daf
- SHA1 bdb16c87ae2ec6e3a029f5317816a70ddade3857
- SHA512 3958443b7e73135b310db53bc7cd4da871ce3ddcce0fbad5c77405f36af38474e50ee3d4748bec2e7b1207b36b5a3695ab1006fc37071bb28ad8e32b59dab6bb
- TLSH
  T19DC02B0F3A083511C6978EF4292745CCC33C03C3800C8C0404C210580F606BAC202700
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral2
- Target
  DCRat/plugins/Audio_native/Audio_native.dclib
- Size 165KB
- SHA256 67935bb204d203e8d47a3f61a3073fda21d07a773593a1a5955302fcd3a1be14
- MD5 b369cfe83ce1191f1b464b8e4a92c518
- SHA1 5e702dc6ef74856d3782c69cc2bd86a8d2ae6ff7
- SHA512 e9d7453ee0ffc9ee5ac90224838740b9c082f295131808aea89c1e89996aa23d1ee34b6811661669d64b6656a9ff6ee32e4b739c8a73e382fdae6fa39fd90f56
- SSDEEP 3072:1Mld1b8hGzenYxqVOzH1sdb+Il57INIwyH7iv53oJJ5Y9QDz:WOOeYIVO6d357eIwIUdwJAQDz
- TLSH
  T1C8F323205BE6875F4D3C752D396BBDAA8693CBA4BC4FB2DC9F417D32885C7649083112
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  DCRat/plugins/Audio_native/configuration.json
- Size 154B
- SHA256 0e70b651580562952f265ad855607c9b118492aa4abaa52d995bc0b10c1ed603
- MD5 27b29dfa53c8bdc9112efc58149ad8ca
- SHA1 739e9d401e13aebb90f30af0c090a115ca10849d
- SHA512 08bbee207c35880ce818b422af2f8847c6ba1ee0360bb947e141e8ae2a12c1e2fb0aaca0a63c99a705b01d7c482d2277d7740754195ae2ac69f0be39ec9ccb08
- TLSH
  T1F7C08C26164AEE8E61A688D61EA1244469089B0BC74D6C1AA0EA8A10068CD1A3242C82
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4
- Target
  DCRat/plugins/Audio_native/icon.png
- Size 2KB
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- TLSH
  T1C341EAC58093D207E9EA4A3768DA56629D5B7723D0270C3AAD69590F0910DF1718F31B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5
- Target
  DCRat/plugins/Autorun_native.plg
- Size 120B
- SHA256 6507b86f8289eb0649bdfac6303d7101c266731556c40b35944932519216b5c3
- MD5 a3a068663e768c251433ae27ff6b1267
- SHA1 414e98bee4fdfefa632681cea326f75656fb1502
- SHA512 da5c4a737896e6e2891e757a1dedad0a82d28c84a41c8299c1e225d85c02410ae9bfe53f2da8797d4d44aa61da42c94f39bf312c3c59014b5e51975e63e95121
- TLSH
  T1EAB0920A996A78EE8AAA8B2804204A88C63C07C7401A8E0828CA1A381E752A2CB05251
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  DCRat/plugins/Autorun_native/Autorun_native.dclib
- Size 42KB
- SHA256 7440b6c6a6a07b2e2f6d4e34698b5c00c7915239e5747317c151897ea0ae89f6
- MD5 7b4f33f37b1bd7b3fbd9d62f6ccdd549
- SHA1 871f04ccd4918ef04a5ab012335b8dbd4ef5fada
- SHA512 50186e5f6f99f7186cef9c1489f1d439d86bc24f41af0cc9c087b99f8ee7ab1693cd5b0b519cb94457227b42bacf2a3aa4b77d162065b2b376ef699a85e392ee
- SSDEEP 768:aaD1ilmRlS5TtFnyE0o1nvsr7KUgASnWL0ZBMOQRHczz0nOd/TTWWpLi0ydPGlJ+:a6QV55EE0o1nErGaSnWLsBMOA8cnOd/u
- TLSH
  T11513F2006F469223BC46EE1DD915D6634FCB374879EFE01A96B108270B99BCC19D0E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  DCRat/plugins/Autorun_native/Autorun_native_config.json
- Size 3KB
- SHA256 519177435cb82fb8dfd8001788382dfbe39df5495e97170c19d59adef922eb5b
- MD5 e390087a1a96a0e26edd30e6ae8ae27a
- SHA1 886b1cdbd507b994b86cb8fd34c88cb9f96fd24b
- SHA512 968f501acd522e3186a3024652b53ce08cec92437e8bcb2cd6155eaeebc882b3c4a393ffd5d8d0df2f10f77c869c00c4bcc84b6eb4f555395d2456edd16dd351
- TLSH
  T11271BE9B34448C7F938D458FEA1F358EF0AE9A1622CA2800D654EFBC8D79498D13752B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8
- Target
  DCRat/plugins/Autorun_native/configuration.json
- Size 177B
- SHA256 355bd7c67cd14e4f2e687aef644eb33deb3b52b8502a6a9622c06067d8a5885c
- MD5 25f49a2d7ccbbf6dc38aa096d300fb96
- SHA1 0613a4747d39ded5a679f79dd5083da36a85dd3f
- SHA512 9a8485d9e564e0e9dd507f525fbe7fc80e2f9436e2371ccdb71b4cc99df5218d6889423e53f10cf73a26aa20c96ce48257a66bb1b60614541ac1d5190cba0069
- TLSH
  T13EC08032551BF8CF744C858F51A51746DB4C870FC5405B9D58F4665498A8F059F60465
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral9
- Target
  DCRat/plugins/Autorun_native/icon.png
- Size 4KB
- SHA256 3689af9cf6000505249c49774079a7d46e0d1913a613ce032dc95b6ba6c7f23a
- MD5 eac0c1f5909cba456b2960f8e2a48fae
- SHA1 e0d6de0c638904dcf7bd6359cff136542d31ef03
- SHA512 a9ba3903803a44fdb2eb6a4959aaaf663043a1394906b2183dc6de92a02c2011c84b3ca7098b434daeaa88f69c4db36cc0fa289635d05ebdd8e6dcffb93ee25e
- SSDEEP 96:rnxqKuPGw+8RXb11dMxh+LsCj1IxbP5U9Gqxgpg0Eiu:YKZ8RTdMxh+LxyxruFxkEF
- TLSH
  T10D915BCB7B262E66FE4582F43E21D6C752A08F034031015B07B3B5A371B16F04E722AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  DCRat/plugins/BrowsersStealer_native.plg
- Size 146B
- SHA256 b3ffa55519f1c9c57c7d712aff8e9c52b06c5b9dfab1fc6113a79b734ba5a211
- MD5 c961b23e2ea7ae8b9ef0dbbf89858828
- SHA1 4abf9cac5fd6b4921a46e14e7a4572a50b88c430
- SHA512 f818449a12c20132c28309cb6c7301847e8d27544966038915ee5d5dd2f391cf29a0a47c4f9da3ecfc126337bbf63fe82cd511b2887cc8dfa291718bf62e7643
- TLSH
  T1D8C09B4D4D7DBF2607968636573145DEE17C0787492F8D1416C7071E0455DFA835D02A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  DCRat/plugins/BrowsersStealer_native/BrowsersStealer_native.dclib
- Size 111KB
- SHA256 ca5be77af22d57b00e2243b0854c1c26da851929271c5b439926ef749066ff0d
- MD5 4e61be02f0ea3eae2fb89524c588b579
- SHA1 c90d45737835a5d3d7c1c1009e2c057390cea667
- SHA512 986530956367d15a007be894bba7c0bd1733880e31e591a3bf71d277923861f97296329044484264eb5728b5639b7992a15530d2e43cb249ca9bd92e42bcce27
- SSDEEP 1536:iopj6SWg+uBfLWwmxJotjSto7xmWUSyCzhKKUvqfnvmMm9OKK7mKqoUdvjdF+NMN:ibxwJLWwMUSWDwWPmfKaK3UhjdUNMo14
- TLSH
  T165B312B3E2159C5787EC1677383E21B635264188E418EDE752E26C23B7AFBCD850A4D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  DCRat/plugins/BrowsersStealer_native/configuration.json
- Size 164B
- SHA256 86d09d372465eabb63483cf983455efcdfac168d40f401ea4699db05f0cf1d96
- MD5 a6bf5267dc19edb590fe2f3f3b22181d
- SHA1 939974f8abfc21d5130902e85a35e6be9a7c78d1
- SHA512 2a10d9611abc6b26a9c2abd2312578adc75704159327c33ea4026ad0342b3dd2ddd2f809b7b1619704887797f7241a14b558c32e8d5532b1212cc0e424014703
- TLSH
  T177C08C210D0EF282A6A44CDB8F6101C1B96C6F4BE609002C99F4914500C080CA5A1A55
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral13
- Target
  DCRat/plugins/BrowsersStealer_native/icon.png
- Size 415B
- SHA256 919e9471cbacdb676fb2757d8785cd6ec930be16bc1ca59c40e4334c96330296
- MD5 ed7303e580419916f53a049d5075fe04
- SHA1 5a2a10ef2410620c8e91940335cce56fc35b623c
- SHA512 d95a0a67c55b72be92be7478af9868f33c7fc95ed7d7d20fd1a10b54eb16385bfb8ce99477ebf37cc9398feb55373f6a38c5f0d1e8d4351ac80cc08f3c5d68e8
- TLSH
  T168E0A386018362F7C719023182F7C3B07B75641ABC11461462ECD0799D06315361D212
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral14
- Target
  DCRat/plugins/CMD_native.plg
- Size 128B
- SHA256 6a251d511466b148dffaa608afd752399eed02a79fc6e1c9ee305d1aec473781
- MD5 4629063bdef75a733472882f7d043118
- SHA1 37c017a596e97d2cb8a854cb9dffa62ee151053e
- SHA512 2fa246addeaf31f09c22cf9ebbbd852317167276832908f85d300dd0a1dcca2c962cd40f1c95fc085278e86bf8bcb2f40892f76e59c3e9a84ea7130ef81f9528
- TLSH
  T157B02B181C1436128647CD380F27078EC13C03C350188C0C440304440C202EA8122214
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15
- Target
  DCRat/plugins/CMD_native/CMD_native.dclib
- Size 50KB
- SHA256 2a7187f0749125244b5070cff29e501954580fa9e9ec2bc6ac4c46326d277f22
- MD5 f4a01875bf9ab8d8efdbb8ba8ea41e71
- SHA1 31b072abf6c227c7ef069e16290192cdbff264f0
- SHA512 b08ef70691f175b40f5209150ea062c2303e7f64e06c849a25144aafebf272d6ae0f0bc90e5807c59bcf05ffd65ba2847569c734172ff1415231be29820d5498
- SSDEEP 1536:fe9bbn8ArUQ/JzQ6Yaa/uqdklMJSpjsHA:f2bbnxr66N6Jk2g
- TLSH
  T1F13302F83F234EB749D18C0272B61D9E00D99969D45C24C36AFFC37A5F09A265C8525F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  DCRat/plugins/CMD_native/configuration.json
- Size 152B
- SHA256 676a72640659bd910f3a0764695a27f47648bb47a52c82d17672dbac2caba65d
- MD5 3df4e2d044af857fab8bdb9c46a565e4
- SHA1 f5dbdeb6c1e8c5fd6a7019dc1c60bd197ec80db0
- SHA512 73dcabb1e4bb60b6f92052144b4d1fe06a5a095df9a6b82186fa7c3732869f4cb2d10668d2f3625e457b7b9dc27c884dc90d89e9f74bea32bfdfe5d943c5d127
- TLSH
  T12CC02B332C15F60A3EADCDDA5CB4455CB10AFFD3D928306ED1706C1240C094514F0E96
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17
- Target
  DCRat/plugins/CMD_native/icon.png
- Size 2KB
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- TLSH
  T1C341EAC58093D207E9EA4A3768DA56629D5B7723D0270C3AAD69590F0910DF1718F31B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral18
- Target
  DCRat/plugins/Chat_native.plg
- Size 131B
- SHA256 39b1a342bd729c5e7a9fc38485c1a34b223840b16c55da51dd6119b0b9859f64
- MD5 784309ece3edf0be434916dbe3ef827e
- SHA1 ac618954e4c98897b03508b2b5eb94704325ac75
- SHA512 65cf0f23f8a5496eb57ef08cdfab5c1162c10cf18ee6bb7478a5e742a34794bff7d963cfdf5aa047657c1934dcc876fd7add217db9e9c511d61fd2f5b1edd8b0
- TLSH
  T184C02B391B0436618647DE761D27148CC17C43C741948C24040208740C302AA8303610
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19
- Target
  DCRat/plugins/Chat_native/Chat_native.dclib
- Size 52KB
- SHA256 e6a1ee6603be735ab9fbae524c540957aec782d105e88dcde428a5713e510f1e
- MD5 a0cfa56bc4b1120975fde5c69375be7e
- SHA1 4005a6e8db928cb80ef0d682e66d3c7dede5c54f
- SHA512 f63f8185fcf4da17bbb49d4ef7f5ecff08f354c136a5a0234540efdf506a2adf40cd5a9f68eea4d4df4f990a9015abe1821de2e9dd51ee73c2798240e1b24f21
- SSDEEP 768:c23TUZCPVBI6SrojwA8LENbTjuODE9xCgA6qI6OgjscB97LboyaZE2oWQqveR+BY:c2jLdDPQENbvdE+IkB3EEFuv6Mq
- TLSH
  T1563302422B80DDEB4A5180E75FCF1E18098277803C055EBF86F94FD2BE21549CA9B53A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  DCRat/plugins/Chat_native/configuration.json
- Size 153B
- SHA256 2d5abb9269144f96a3126aa02ad5a5108989e83583f22acfcdbb1fb7319d5aa5
- MD5 78fe0b20fb0683bc13739513cf826f2f
- SHA1 2afa83e9ff6495260ccc27829e8539762c8de3ea
- SHA512 9c1560e50723a09e1ab04cf922295bc7c180e1c35dae1089964ff94051b231af797897e3612ca5f24dd73247340e11ee4f20be506ab25afdf219e8fa67eb9bb1
- TLSH
  T16CC08C310A219A933E780D6B4A6024C1D8067607F9276498A0E4B61002CA80C2194ED6
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21
- Target
  DCRat/plugins/Chat_native/icon.png
- Size 2KB
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- TLSH
  T1C341EAC58093D207E9EA4A3768DA56629D5B7723D0270C3AAD69590F0910DF1718F31B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral22
- Target
  DCRat/plugins/ClientsStealer_native.plg
- Size 143B
- SHA256 3048fee32fd98c549f3568f14dd9985c776dfde3f6dfd4772c74f05a7212835e
- MD5 e8e671b4d9266af293efd3dc106b1a6d
- SHA1 cef9ff0b5b23767a049062c1b18fbeeb60250f56
- SHA512 3e4f8e3afb018e2fee400b56ae7310a87b2ccd141fbb5d5f7c2a6e9b3f69d1a0a1bf12a3bb7c7633fca7215e4f8238f50d07fd60d7fb0cc0a14d6d14678653fa
- TLSH
  T120C04C056A6A7BB647568F159A318587E17C068246278C1C1981061E08995B7825D02A
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23
- Target
  DCRat/plugins/ClientsStealer_native/ClientsStealer_native.dclib
- Size 90KB
- SHA256 e745b5148680fe943b016f8c0178aa3153194a3b48c563763278aa3aa3c4438b
- MD5 0ab5f5e62697c36625d53a29e06ff129
- SHA1 0114c55c188a47f9f5b55999bfd7290f30d91d2f
- SHA512 ae43f3d83720768495fe1e896d73c3ab8e5f9db2ddcf0a4ab5de7c935fdc4cdecc05ef4bd667afe6a7f72083e523447af04512e839e3ffab379f285a92d91109
- SSDEEP 1536:u35uhL8/PxYbhPkYz3/cLpHKDczVYRqjdlXetUT8rm8QH53GsMYB5SsEutSsdnxL:y5I8/56MLNzH7Xy9mxH52lTetNs/mj
- TLSH
  T1559302D1E355AE887A110264B46205FA4AB603079D5DFDEB4BA069BD7CC73DCA8C63C3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  DCRat/plugins/ClientsStealer_native/configuration.json
- Size 163B
- SHA256 cb9a59527f96f79a509b9c2ce18ed4dca46656f225add8148d81005f85e4b8c8
- MD5 d3b2e0627432012083215387f96d9ef9
- SHA1 207ab0e6d4bac1a996a1ba327c5153527729cd0e
- SHA512 a112539e8ff035cc558532f51a854cdfbb3ac65ca0819639129d337d3d2577c20234634b3bb6e09cc737a43a7c36f1c75756a6e87e26ede951052b3926b10d3f
- TLSH
  T130C02B607919F65331988CFF56A444EAB94CD34BE6561D3CF4F02C88C8FA50C13E859D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25
- Target
  DCRat/plugins/ClientsStealer_native/icon.png
- Size 415B
- SHA256 919e9471cbacdb676fb2757d8785cd6ec930be16bc1ca59c40e4334c96330296
- MD5 ed7303e580419916f53a049d5075fe04
- SHA1 5a2a10ef2410620c8e91940335cce56fc35b623c
- SHA512 d95a0a67c55b72be92be7478af9868f33c7fc95ed7d7d20fd1a10b54eb16385bfb8ce99477ebf37cc9398feb55373f6a38c5f0d1e8d4351ac80cc08f3c5d68e8
- TLSH
  T168E0A386018362F7C719023182F7C3B07B75641ABC11461462ECD0799D06315361D212
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral26
- Target
  DCRat/plugins/Code_native.plg
- Size 131B
- SHA256 7bb29808fe64c6c36904aad6439b23291ce12c8cc45bcaa7be5942c7062e1fe8
- MD5 f085b0bbe5365f543baff07b40713274
- SHA1 f16346d8a880ee61386af264107320b6f917cf62
- SHA512 222c4dbdb3681a23b2ce94b88dc40213f60a1a48691b0253fbbc12d1114f8121080e8f07864de9915e35560f14700ec53200a304726559db39a0453e9a937c3c
- TLSH
  T124C09B096A5475668E579DF46D7B458DD17C47CB41558C04185205740DF52AA8206615
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27
- Target
  DCRat/plugins/Code_native/Code_native.dclib
- Size 50KB
- SHA256 cec7ffb6f6dab8f49ee235febecf101dd738c501dbc30b0f557e004a300a336a
- MD5 18e19d382f2d0627ea7a680a508233d3
- SHA1 5d56c744fbe43be0c750e66c54fb6db0a5e5dd5d
- SHA512 a81d2632435cbf0454ea4c587c9c6b59ca2efcea38142678ff9d348b359758ff22f91def7510da3a3b14888b8e14d65d4d4379a9883125c87ef5fd61a70dc0f0
- SSDEEP 768:L383zIvNJHwLRZ5qLN5l87aDlGNT7fACsoN0DT86a/vBt5sUao3b8CGqglTuJhpE:tvvHwLRiQ7VACtX6aR/GnYDpchF
- TLSH
  T1233302692C1B9EF7542887EF5D19875554ED2CA00FD9C03BEA20E0BAB7EF9119DCA10C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28
- Target
  DCRat/plugins/Code_native/configuration.json
- Size 153B
- SHA256 23b8f658205d40e7d04ef1a2089466de1bc80ab5a336b6953551f7ed29370c17
- MD5 64114564fd2ac6a6715f16ed470345b6
- SHA1 ecabc2a7ddcb0230bec547c118a252a05a9780ec
- SHA512 267d396ae26d4de8c573b52fdeb2ec82977ba8918b1c14aadd53a2567c61f759bffea417bebe4e4ca9d8c70933ac95b3bb594383154d373e6cc78927f30d6272
- TLSH
  T1AAC02B710306D4032EBC0CCB0DFC00C1881BA78FE1402C9CB1911D28DBC8AAE1781473
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29
- Target
  DCRat/plugins/Code_native/icon.png
- Size 2KB
- SHA256 a4f7e5adde35c1979fbf2cc44b37e2907ec963468443e34262b207dd3dab81b8
- MD5 a8e72c0e27750ce36da3110126c38afe
- SHA1 e96bc3555f8ed8e715af94d492965b4e6597563c
- SHA512 e43e2c6abb6006c783331cb8b0e290560bb65f7cfd0e113bbddb31a6978aee31fb39a2b22b38ef83f27d512152329d066bc270e640e8900b2746a2a4e0b4dd48
- TLSH
  T1C341EAC58093D207E9EA4A3768DA56629D5B7723D0270C3AAD69590F0910DF1718F31B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral30
- Target
  DCRat/plugins/Common_native.plg
- Size 137B
- SHA256 deb95e89516c7cb405f20cd83e74b58b2b31f1ab3c062e2b3b4529618ed3b122
- MD5 7a38e79f706f9169e4f842e7d58c60ac
- SHA1 9eee0de07688701618d4bf60543816683a74dcf8
- SHA512 4bf57bc8d4b8b34db49b18fb09c1c42a0406a3ca1fea4390a873af8bd2ebedd6d1d993d6921b76bc52ccf47a2428a2a20f7918691259683c18d6c4edcf5b1efd
- TLSH
  T1AFC02B1818D435118A978DF41D3F248CC1FC83C340948C04040321740C303AA8902324
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31
- Target
  Patcher/Mono.Cecil.dll
- Size 354KB
- SHA256 c41bdb9ffd3c5f6e17d2382c1012d73703e035e3f1100245fdd4e08c8dc6eb5b
- MD5 2f096535c228ab0d2082adfc01678481
- SHA1 0e0dcb36aa56e7f99aa524cfb3c72e4918cc5b32
- SHA512 9f54b9e85ef70afcb36569885de73bba704a8901c8ddbb5a35de6a1921d4d42f88026aea41ed77ec7a8041ee8a04efef817deda7dea0f29a716dab7a6ea7fd9e
- SSDEEP 6144:LHNGIaxcvxT+2pEwMjbLmRlQ5+A45iziJCJP+pIoTtya:RRUQCmRw4szYCOI
- TLSH
  T165747B2167EC163BCADFA37BD06B042D46F9D015638FDB8D6D84A6F91C83FA65800267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32