comrat | b80e086faafd950de2e28466c2ff2264f072bf03111fc91539b184398012d90f

General

Target
b80e086faafd950de2e28466c2ff2264f072bf03111fc91539b184398012d90f
Size 1.9MB
Sample220415-hsrlaaded7
SHA256 b80e086faafd950de2e28466c2ff2264f072bf03111fc91539b184398012d90f
MD5 7cf017c7dc4d10cfcd2c21936ea11305
SHA1 ab4feda85ae8d655d3d8c3dba9c67a581aa45815
SHA512 799c4fef459d366a23acfe09b255236478f02ed15e6f74edf748fb05ca30d1bcde04ae0edaa580dd6230ad1421e9431fb44fe82037963cc29fe1592199fd4425
SSDEEP 49152:/RNX0+U/gyQMsp5x30YPJ7BtjoaQqCZozOJaRPZ:5Nr9oaB2aJZ
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

comrat

ComRAT v4 (Orchestrator DLL) 1 IoCs

File contains strings specific to ComRAT v4 samples first seen in 2017.

resource	yara_rule
sample	ComRAT

SHA256 b80e086faafd950de2e28466c2ff2264f072bf03111fc91539b184398012d90f
MD5 7cf017c7dc4d10cfcd2c21936ea11305
SHA1 ab4feda85ae8d655d3d8c3dba9c67a581aa45815
SHA512 799c4fef459d366a23acfe09b255236478f02ed15e6f74edf748fb05ca30d1bcde04ae0edaa580dd6230ad1421e9431fb44fe82037963cc29fe1592199fd4425
SSDEEP 49152:/RNX0+U/gyQMsp5x30YPJ7BtjoaQqCZozOJaRPZ:5Nr9oaB2aJZ
MD5 SHA1 SHA512 SSDEEP

windows x64

ComRAT v4 (Orchestrator DLL)

File contains strings specific to ComRAT v4 samples first seen in 2017.

Minor OS version

Major OS version

Entry point

571184

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths