dcrat | HEUR-Trojan-Spy[.]MSIL[.]Stealer[.]gen-5caa9414d268[.]exe

General

Target

HEUR-Trojan-Spy.MSIL.Stealer.gen-5caa9414d268.exe
Size

240KB
MD5

e9ea3d91ce08bf582636bdde5466886f
SHA1

154107ded5ce3a8a99d3dead3d28c8bd646cce97
SHA256

480cec781932a19dd9c213b5dec821221c0662f25883f84513f9c68b7eea9ab6
SHA512

799598e937383718dec444937b4d62fdb22afaa095dca8a3b6abed19c02d35b40ddf90a29e7f8e3d45fe0ea24cee115633cd3c1cba825bdc10d1203bd7d6ed00
SSDEEP

6144:qqqDLONuNEVnfdx8XCS1+wrPYAr6/4qV9lQjFQblxjeW:fqnOpfdSL1NYAm/4q2CHeW

Score

10^/10

rat dcrat

DCRat payload 1 IoCs

Detects payload of DCRat, commonly dropped by NSIS installers.

resource	yara_rule
sample	dcrat