General

  • Target
    https://cdn.discordapp.com/attachments/1539326549675745361/1539327556572942346/Launcher_1.exe?ex=6aaad400&is=6aa98280&hm=d62d038737de1da0cc45aedc25e2db9584f4c3bceca77ad4f8f525958af6dec6&
  • Sample260916-dyvsnsvfng

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1539326549675745361/1539327556572942346/Launcher_1.exe?ex=6aaad400&is=6aa98280&hm=d62d038737de1da0cc45aedc25e2db9584f4c3bceca77ad4f8f525958af6dec6&
    • Detects DarkSideRAT

    • Family: DarkSideRAT

      DarkSideRAT is a remote access trojan.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks