General

  • Target

    Idle.exe

  • Size

    2.5MB

  • MD5

    75136c00a06c6ee8c30e8a969fac27a9

  • SHA1

    d4d02785c465a544573f6d113849d48f2ad35fed

  • SHA256

    28c79c3f0bd6ee03025e4e4f61a2d25a00bebc0b1d3776bfabc824fc49013fcf

  • SHA512

    187385d74f340932ba2b46970846e72f0da058a29f49a50879edde3aef17dc910ca49fb0ae24cc2d49745cd1f21c4450aa4f3d258b8a129918a51b217506af2d

  • SSDEEP

    49152:M2bjYDwitkxyOO1dHyWOdewRrirxMjvQI7OAax3B:MgjMJ2dyrybQI7Qz

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Idle.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections