General
- Target roxie.exe
- Size 956KB
- Sample260827-slapaswsft
- SHA256 bd407efc85bf3bd3bc33b8ae9464b8895db7d6a45747e066e820cb2d620394df
Score
10/10
Malware Config
Targets
-
- Target roxie.exe
- Size 956KB
- SHA256 bd407efc85bf3bd3bc33b8ae9464b8895db7d6a45747e066e820cb2d620394df
Score10/10-
Detects DarkSideRAT
-
Family: DarkSideRAT
DarkSideRAT is a remote access trojan.
-
Modifies Windows Firewall
-
Stops running service(s)
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Netsh Helper DLL
1