dc.exe

Classification: Malicious

dc.exe is a malicious file sample (application/x-dosexec, 12.6 MB). Linked to Apt37 activity. Reported by 3 threat sources, last seen 2023-10-24.

Detection summary

  • 0 antivirus detections (58% detection ratio)
  • 0 IDS alerts
  • 4 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: APT37 (G0067)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-10-24 03:15:06 2023-10-24 04:45:10
Apt37 Maltiverse 2023-07-04 04:28:54 2023-07-05 20:50:53 malicious-activity G0067 APT37
Generic.Malware MalwareBazaar Abuse.ch 2023-06-19 09:47:42 2023-06-19 09:47:42 malicious-activity

Tags

apt exploit infostealer qakbot

Sample information

Filenames
dc.exe, a1dc3e2f998031a7c96685e6571f4f5f.exe
File type
application/x-dosexec
Size
13216021 bytes
MD5
a1dc3e2f998031a7c96685e6571f4f5f
SHA-1
396c0dfc1af6b1084c1a6c882a3933954f7d6204
SHA-256
f1f178feb065f7deedf19c4d29428eefb0632acdf4568e48e0067b466f77d15c
First indexed
2023-06-19 11:17:59
Last updated
2023-10-24 04:45:11

Process list

NameCommand line
dc.exe
dc.exe
cmd.exe/c copy "C:\dc.exe" "%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Startup\dc.exe"
cmd.exe/c "ver"