Overview

overview

10

Static

static

10

New_Recode...zm.exe

windows7-x64

10

New_Recode...zm.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    New_Recodezip_ccKzm.exe

  • Size

    4.1MB

  • MD5

    1b86767c8010c15292ab4e908e78c816

  • SHA1

    5406e9382393e5bfbe8ab4e275a15d69b84b3c58

  • SHA256

    0571d4081865390f9eb34752c4cce3eb566271b199eb72669a9c5588b5ea0de7

  • SHA512

    1ffa8861a604882cf9b91675b74e43562164b3e905814c6bb5bb7fa375983ebd89c5731ca6fb49763f4c68e728eb122d4158bac36a6dc9b0efff2b2ffce18256

  • SSDEEP

    98304:hbbrvdAovVzr/11pPnQHdd0ZIc8vC1zKTTU:hZfr/11pP+ddwgvLTU

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • New_Recodezip_ccKzm.exe
    .exe windows x86


    Headers

    Sections