General

  • Target
    https://www.mediafire.com/file/vqoil6zh3d8njua/ReaperLoader_1.0.112.exe/file
  • Sample260907-t8xysa1eka

Malware Config

Targets

    • Target
      https://www.mediafire.com/file/vqoil6zh3d8njua/ReaperLoader_1.0.112.exe/file
    • Detects DarkSideRAT

    • Family: DarkSideRAT

      DarkSideRAT is a remote access trojan.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks