Overview

overview

10

Static

static

10

02965599.exe

windows7-x64

10

02965599.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02965599.exe

  • Size

    2.6MB

  • MD5

    372cc839865083adf0f65df5328bd899

  • SHA1

    c0b501e644a12cd28957359f81e984b669c630a4

  • SHA256

    147e07c4f900dbd2c64b3bf60502937838a2b2afed76ada94ef8705a12b5b6a6

  • SHA512

    09ca0793b79583178f2aa9de209adaa73e4ca3c898bf732ee4874adea070caacebaec961772feca62816c0c45de0acc7ca940e08862c14b7b01178649eabc36e

  • SSDEEP

    49152:UbA30qPDl0T7HdZNFvKiUy2CDnVjT6f3XFmI2:UbcJ0T7jvL+2BTsHFmI2

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02965599.exe
    .exe windows x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections