General
- Target Luckyware _ DarkSideRAT FUCKER KILLBYTE.exe
- Size 559KB
- Sample260804-3fk8ystakh
- SHA256 b33fc886beea76f9d9fef4a7d3ed6c3fb7d92916406dab494407a68875e295bc
- MD5 77feaac69ff95168e5d9dfdbc9c414f9
- SHA1 7a1062ef3e06cf7ff5d0f899c3620726590cc0c6
- SHA512 71e56afd1de554285fb064d8fe1b2f41f93fc3acc6409591655331e38ed2ef0c06d7f59612c50b90f6c4c400132269188741234efd50a3a995a858254adb461d
- SSDEEP 6144:NATZN84Aw1zs+NsSrSgZrWs+H0rRahO2qbUqev/nkCuIf68KOEUyV1fETKKXE4Uy:NYDB1zNzrpw0QybE/knIfgOrW1cTKkP
- TLSH T186C46D36A79402FCE1ABD179CE424D06E772784917B09ADF17E046A21F276E05F3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Luckyware _ DarkSideRAT FUCKER KILLBYTE.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Luckyware _ DarkSideRAT FUCKER KILLBYTE.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Luckyware _ DarkSideRAT FUCKER KILLBYTE.exe
- Size 559KB
- SHA256 b33fc886beea76f9d9fef4a7d3ed6c3fb7d92916406dab494407a68875e295bc
- MD5 77feaac69ff95168e5d9dfdbc9c414f9
- SHA1 7a1062ef3e06cf7ff5d0f899c3620726590cc0c6
- SHA512 71e56afd1de554285fb064d8fe1b2f41f93fc3acc6409591655331e38ed2ef0c06d7f59612c50b90f6c4c400132269188741234efd50a3a995a858254adb461d
- SSDEEP 6144:NATZN84Aw1zs+NsSrSgZrWs+H0rRahO2qbUqev/nkCuIf68KOEUyV1fETKKXE4Uy:NYDB1zNzrpw0QybE/knIfgOrW1cTKkP
- TLSH T186C46D36A79402FCE1ABD179CE424D06E772784917B09ADF17E046A21F276E05F3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Modifies Windows Firewall
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1