General
- Target emubyrei.exe
- Size 23.6MB
- Sample261019-cey6badf86
- SHA256 ba7d077c2752e3552d63e31dbbe49748d4b000dc568b1d0cf95e1f10a0be9316
- MD5 c9b25ec05aecfbc6a9f94ecd3e471533
- SHA1 acc37630ff81e5ea86069109e264bab4ea6fa84f
- SHA512 d74e3e154bda2f755e93b2c536c89395be9713d0e1878d02c6b4bd6d1f6e921e553e5ffdbe4d1da35f1845e424a61f87e140df7434030defc42afa8c57f48c8d
- SSDEEP 393216:a3MSkcENkT5gk3TebRfQZFqthu82Eov1Z:a3M9rkT5RTERfQZFbv1
- TLSH T131475A157A5BACADD19AC8B083474A634A2170DB0A35BAFF41C482353F6DBF46F2D319
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
emubyrei.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
emubyrei.exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target emubyrei.exe
- Size 23.6MB
- SHA256 ba7d077c2752e3552d63e31dbbe49748d4b000dc568b1d0cf95e1f10a0be9316
- MD5 c9b25ec05aecfbc6a9f94ecd3e471533
- SHA1 acc37630ff81e5ea86069109e264bab4ea6fa84f
- SHA512 d74e3e154bda2f755e93b2c536c89395be9713d0e1878d02c6b4bd6d1f6e921e553e5ffdbe4d1da35f1845e424a61f87e140df7434030defc42afa8c57f48c8d
- SSDEEP 393216:a3MSkcENkT5gk3TebRfQZFqthu82Eov1Z:a3M9rkT5RTERfQZFbv1
- TLSH T131475A157A5BACADD19AC8B083474A634A2170DB0A35BAFF41C482353F6DBF46F2D319
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects DarkSideRAT
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Stops running service(s)
-
Checks whether UAC is enabled
-
Suspicious use of SetThreadContext