Overview

overview

10

Static

static

10

DarkTrack+...px.exe

windows10-2004-x64

5

DarkTrack+...px.exe

windows11-ltsc_2024-x64

5

DarkTrack+...ta.exe

windows10-2004-x64

3

DarkTrack+...ta.exe

windows11-ltsc_2024-x64

3

DarkTrack+...er.exe

windows10-2004-x64

3

DarkTrack+...er.exe

windows11-ltsc_2024-x64

3

DarkTrack+...eg.exe

windows10-2004-x64

3

DarkTrack+...eg.exe

windows11-ltsc_2024-x64

3

DarkTrack+...e3.dll

windows10-2004-x64

5

DarkTrack+...e3.dll

windows11-ltsc_2024-x64

5

DarkTrack+...e3.dll

windows10-2004-x64

3

DarkTrack+...e3.dll

windows11-ltsc_2024-x64

3

DarkTrack+...er.dll

windows10-2004-x64

5

DarkTrack+...er.dll

windows11-ltsc_2024-x64

5

DarkTrack+...ub.exe

windows10-2004-x64

10

DarkTrack+...ub.exe

windows11-ltsc_2024-x64

10

Resubmissions

08/08/2026, 00:20

260808-amxlcaag5510

08/08/2026, 00:11

260808-agzhraej5x10

29/03/2023, 22:40

230329-2llw1aab66

29/03/2023, 22:31

230329-2fqb8sbg6t10

Sharing

Copy URL Twitter E-mail

General

  • Target
    DarkTrack+Alien+4.1 Legit Copy (1).rar
  • Size 15.0MB
  • Sample260808-amxlcaag55
  • SHA256 f7fbc70d8ade17021be6dab695467b4e4b970012f2f0705e7a3cf564df563a1c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
darktrack anti-terminationaspackv2discoveryevasionratstealerupx

Malware Config

Targets

    • Target
      DarkTrack+Alien+4.1 Legit Copy (1)/DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Compressors/upx.exe
    • Size 283KB
    • SHA256 c0f9faffdf14ab2c853880457be19a237b10f8986755f184ecfe21670076cb35
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2
    • Target
      DarkTrack+Alien+4.1 Legit Copy (1)/DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Darktrack 4.1 Beta.exe
    • Size 2.9MB
    • SHA256 90e4c9da7a502d71c88b0d8e58a5f4f884de9d6d5c73b753923568784f0302fd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      DarkTrack+Alien+4.1 Legit Copy (1)/DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Mescaline File Binder/Mescaline Multi File Binder.exe
    • Size 878KB
    • SHA256 80eb6c0204241543f26412c21af9b8d9bc89c20dc24f2d2efff4d674c9e6f350
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      DarkTrack+Alien+4.1 Legit Copy (1)/DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Modules/ffmpeg.exe
    • Size 29.4MB
    • SHA256 1abee4a7dbe8f624290054c14ef7b58db19e93df976c2adb8ff4bd20974c3a78
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      DarkTrack+Alien+4.1 Legit Copy (1)/DarkTrack+Alien+4.1/DarkTrack Alien 4.1/Plugins/sqlite3.dll
    • Size 171KB
    • SHA256 33eb31a2a576e663474a895ff0190316c64a93d9ce05a55df0d53f9beeb61163
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral10behavioral9
    • Target
      DarkTrack+Alien+4.1 Legit Copy (1)/DarkTrack+Alien+4.1/DarkTrack Alien 4.1/sqlite3.dll
    • Size 245KB
    • SHA256 629fd65a87d6d08503e45348ecc7c337f4921f35e47356e8fab6f3007039c280
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral11behavioral12
    • Target
      DarkTrack+Alien+4.1 Legit Copy (1)/DarkTrack+Alien+4.1/DarkTrack Alien 4.1/sqlite3Reader.dll
    • Size 171KB
    • SHA256 33eb31a2a576e663474a895ff0190316c64a93d9ce05a55df0d53f9beeb61163
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral13behavioral14
    • Target
      DarkTrack+Alien+4.1 Legit Copy (1)/DarkTrack+Alien+4.1/DarkTrack Alien 4.1/stub/stub.exe
    • Size 627KB
    • SHA256 98fb43736370f72edda152a0c6e5edeab4ffcd9e1c5b4da932b63e0b786c4161
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    anti-terminationdiscoveryevasiondarktrackratstealer

    • DarkTrack payload

    • Family: DarkTrack

      DarkTrack is a remote administration tool written in delphi.

      ratstealerdarktrack

    • Detects potential process-critical anti-termination behavior

      Detects RtlSetProcessIsCritical or NtSetInformationProcess references associated with process criticality, likely causing a BSOD upon terminating the program.

      evasion anti-termination
    behavioral15behavioral16

MITRE ATT&CK Enterprise v16

Tasks