Overview

overview

10

Static

static

10

06983299.exe

windows7-x64

10

06983299.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06983299.exe

  • Size

    1.4MB

  • MD5

    2b66b04d81792b8391fb9a0a8b1cadcb

  • SHA1

    aa2407d93eb512093bb191d19d1b4ef474dc2eb8

  • SHA256

    b80644803f578f33e59aa51ebec2e1c6726afb4447344d8e299216797bde2747

  • SHA512

    806c651ba2f146727d2b24225263cbec711ada7cba804c5571f6e94f9c14d328ce1afcf23fc95550f86864594453e0540f9b598b83acb53cbc33d9353755f8ad

  • SSDEEP

    24576:u2G/nvxW3WieCW2efqdPsK8Vx2mxdClw3HQ0H+4R:ubA3jIqJqi+O0Qdu

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 06983299.exe
    .exe windows x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections