Resubmissions

16/09/2026, 06:21

260916-g4s3tazz9m10

16/09/2026, 04:38

260916-e9l6cazv4k10

General

  • Target
    Shrimpware.exe
  • Size 2.3MB
  • Sample260916-e9l6cazv4k
  • SHA256 d421e44e4d3d19621afc8b21d728170a8f452acdc68554b0b1d166a8d451036a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Shrimpware.exe
    • Size 2.3MB
    • SHA256 d421e44e4d3d19621afc8b21d728170a8f452acdc68554b0b1d166a8d451036a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects DarkSideRAT

    • Family: DarkSideRAT

      DarkSideRAT is a remote access trojan.

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Downloads MZ/PE file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks