General
- Target Loader.rar
- Size 13.4MB
- Sample260812-v645razsgt
- SHA256 3f3e00477ed1045ad29d625dcabad22cc435b79b1e8b58db2c889a37ca6f264b
Score
10/10
Malware Config
Targets
-
- Target Loader/AzureXYZ.exe
- Size 15.7MB
- SHA256 29efe121e2874fbc3a91a47dbe3a61507c5d20884468664f8a40214f99e8aaec
Score10/10-
Detects DarkSideRAT
-
Family: DarkSideRAT
DarkSideRAT is a remote access trojan.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
- Target Loader/fix 102.bat
- Size 1KB
- SHA256 097f72e565ccca18e2ea679fed5ef72f72dbbe7bf61c32d1a4493e41b03f42ec
Score4/10 -
- Target Loader/license.txt
- Size 146B
- SHA256 8f8394cbc31ff0c7b3a797d64cee6867c2dc5e5e456b6ea7117189418f91fbc7
Score1/10