General

  • Target

    HEUR-Trojan-Spy.MSIL.Stealer.gen-f32a37424ccb.exe

  • Size

    1.7MB

  • MD5

    3c77aa38298785317ba568f6561458c2

  • SHA1

    15fc4eae70d13df375df13eec67d2208d4b83334

  • SHA256

    f32a37424ccba445f53662ff847a5ed6c5692d827a57fe3e0ca2cdf1a8f41790

  • SHA512

    b6fb86bd9f6f6fee5c4770c13c2d4779d84549be17400ce7cc9be7c8449a2e8aafdb9c036d56f146eea84f2acf5d4a33eb214b1db001cfa4e84a3bdd6cafe8c9

  • SSDEEP

    24576:h2G/nvxW3WSZ01e3J09QcGtD2F0Wpq0Ld7UT29cENYaK2q5aj+4H:hbA3velF2CTK2q5aya

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family

Files

  • HEUR-Trojan-Spy.MSIL.Stealer.gen-f32a37424ccb.exe
    .exe windows x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections