General

  • Target

    CRU.exe

  • Size

    3.5MB

  • MD5

    971538eedf4e39708491e1d964bab01a

  • SHA1

    43e8d067a8c499dcebf0fae50bce7c0f2c561ee1

  • SHA256

    f93d4bc0e5bf889bf4acb3a6649a437fe1d7e684280aa250d3309fb57b0d1df2

  • SHA512

    a637ac26af99cb546a32afe122e57cde5c92bae8e0a8b6c8b0346ed44faa876add01dfa6c2170d5cca6b89257b08cad2703dc32d00d76ab5d7ca6d56c1a5ade7

  • SSDEEP

    98304:Gb6Qyh8gx+cVv14tfMC94tb6Gnnf3avMFCYe:G/yhx/R14tMC94tb6GfqvM4Ye

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family

Files

  • CRU.exe
    .exe windows x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections