General

  • Target

    C0F9897CD67C3C49F61349B73F70D73714BF290E00196.exe

  • Size

    1.9MB

  • MD5

    c89c390fda4c8b4000333bb2e426c2a6

  • SHA1

    72ef9f6cc0b36e57a6abd9b7966163b8771c6bde

  • SHA256

    c0f9897cd67c3c49f61349b73f70d73714bf290e001966a468798614416b78d1

  • SHA512

    d248941ea30978d52552c9eb1ac5676bbf807cff65d1f4515cef96bcacdf87e2a0f2f12baa37bc84f5f39055712884752323d6094afd56cf464c85afb398b391

  • SSDEEP

    49152:ybA3Jo7kyIs+8AOFAvUE1wyf1DQfHd+5CC:yb6SXwUE1z1iHM/

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • C0F9897CD67C3C49F61349B73F70D73714BF290E00196.exe
    .exe windows x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections