Overview

overview

10

Static

static

10

client(3).exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    client(3).exe
  • Size 21.4MB
  • Sample260819-ptqtpsthla
  • SHA256 93453e0a0a94c9ed4ec3325083a30a235763709af5d8c25932fc6362f394db94
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
sparkratbackdoordefense_evasiondiscoveryexecutionpersistence

Malware Config

Targets

    • Target
      client(3).exe
    • Size 21.4MB
    • SHA256 93453e0a0a94c9ed4ec3325083a30a235763709af5d8c25932fc6362f394db94
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoordefense_evasiondiscoveryexecutionsparkratpersistence

    • Family: Sparkrat

      Sparkrat is a cross-platfrom backdoor written in Golang.

      backdoorsparkrat

    • family_sparkrat

      Detects Sparkrat payload

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks