PULSE NAME
DragonSpark | Attacks Evade Detection with SparkRAT and Golang Source Code Interpretation
WHITE AlienVault 2023-01-24 Modified: 2023-02-23
12
IOCs
MEDIUM VOLUME
Recent attacks against East Asian organizations we track as ‘DragonSpark’. The attacks are characterized by the use of the little known open source SparkRAT and malware that attempts to evade detection through Golang source code interpretation.
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
SparkRAT
Indicators of Compromise (2 / 12 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 URL domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA256 1233a3d7bb4cfc8b9783a6bde15edfd8f5274acb7666e14f75ed5348cf7699e9 SHA256 of bdf792c8250191bd2f5c167c8dbea5f7a63fa3b4 2023-01-24
FileHash-SHA256 5585750ed182014fa4e52414ff733348ddd324f22f8ca2b476460273cba3d133 SHA256 of 83130d95220bc2ede8645ea1ca4ce9afc4593196 2023-01-24