PULSE NAME
DragonSpark | Attacks Evade Detection with SparkRAT and Golang Source Code Interpretation
WHITE AlienVault 2023-01-24 Modified: 2023-02-23
12
IOCs
MEDIUM VOLUME
Recent attacks against East Asian organizations we track as ‘DragonSpark’. The attacks are characterized by the use of the little known open source SparkRAT and malware that attempts to evade detection through Golang source code interpretation.
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
SparkRAT
Indicators of Compromise (4 / 12 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 14ebbed449ccedac3610618b5265ff803243313d 2023-01-24
FileHash-SHA1 2578efc12941ff481172dd4603b536a3bd322691 2023-01-24
FileHash-SHA1 6920f726d74efb7836a03d3acfc0f23af196765e 2023-01-24
FileHash-SHA1 83130d95220bc2ede8645ea1ca4ce9afc4593196 2023-01-24