Overview

overview

10

Static

static

10

HEUR-Troja...0b.exe

windows7-x64

10

HEUR-Troja...0b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    HEUR-Trojan-Spy.MSIL.Stealer.gen-63364802300b.exe

  • Size

    1.0MB

  • MD5

    6556df628ef9920f1f5ceffbf86caae2

  • SHA1

    7667427c17eee79665265b7e63cb89757e8dc497

  • SHA256

    63364802300b3ce3112c20e60e35142e3caa5d23eda2f0b7426dab32c33c8f06

  • SHA512

    23004ca8794939a2e5ad5aa1fa5626dec23a77e577c797e3b3c4ced5d29f354008b75ef7c4671685b25a927241b8dd002a4109e98b0d0e1b31297186c35304b3

  • SSDEEP

    12288:+Qc51+926cHPKywR+IH+QFycRjS4vGxqYUg7Q67N0eEDpwmi7bvWqn4:+Qs49Wyj+IHJFycVtCucN0eEtOzW+4

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Trojan-Spy.MSIL.Stealer.gen-63364802300b.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections