General

  • Target

    HEUR-Backdoor.MSIL.LightStone.gen-6176ead8802.exe

  • Size

    1.3MB

  • MD5

    85620308fb243bbdd9d8aa57e2263ffe

  • SHA1

    bf6e0c09dd0a77212f793309c28ccae6ef1e7efd

  • SHA256

    6176ead880248cbccdf7df359034699e937249e13608b788be1b25158b09c1ca

  • SHA512

    4ee1a0e2b193ba818224a65053f68f2cd85f84e2e5ac61aa1f73c35f3f53aa1db1501ecbf1d265eb3a9a88ef8dc5fdb73549c74506b804781131b9e49b8e7fb0

  • SSDEEP

    24576:MLwN2nzV2Z63qotg3GlEoAAXZFklzLTCjRz+4:MLwczVc4S3zLORC

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Backdoor.MSIL.LightStone.gen-6176ead8802.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections