General

  • Target

    msconfig.exe

  • Size

    2.3MB

  • MD5

    9df572e1e6c3245d2a9e975667f856e4

  • SHA1

    c50a33f1343941d62ed21052c84af532fa60debf

  • SHA256

    f095c489f29919998ebd730af2fa7ff21bf447958acc74362efd5d897edb3174

  • SHA512

    251955b1d4151ad47b65d7187ceb3ad1741115833bd0fae49cbdd801a0c2cef96bb0a4b3c8b65614e7b0455c71ff4978ed7f438ba4eebd787034e3829b2d89e5

  • SSDEEP

    49152:UbA30LCTmQifG0BKbz0rS0AGVJHcsT2YO6W:UbK3sGq6z0rSBCtHW

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • msconfig.exe
    .exe windows x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections