General

  • Target

    HelpTool.exe

  • Size

    2.9MB

  • MD5

    1157d17d7fe048d8ef1203adda9968a4

  • SHA1

    78c6e5f787441ed7c30c2312f1fdaff2877bcee2

  • SHA256

    4f3476c2fb1e6bc64244bdfd75f91b6283937c9d61f835b4e36dd35642eefd87

  • SHA512

    5ddebc9da92d7e07449133c7173b9fcb485dbdd71de816024720d08d556d65f315313c65c167bfc67346f1a4775d8195fc03fdf237be6dd1055efb4b135f0a49

  • SSDEEP

    49152:UbA30J8cbEuh4/RNY0LbjdDbIQMoRmafH+mh7yBCeci2qTJy/M2CeT3N4WV/:UbV8cLkvbjpE6R9yBCRmJS7Ced

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HelpTool.exe
    .exe windows x86

    Password: 1234

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections