Overview

overview

10

Static

static

10

HEUR-Troja...e7.exe

windows7-x64

10

HEUR-Troja...e7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    HEUR-Trojan-Spy.MSIL.Stealer.gen-116e97fee9e7.exe

  • Size

    1.0MB

  • MD5

    bb6a2d8e7ce1d1747f5feba71c756843

  • SHA1

    1e21bfda2831d10950bf736b1a6e84e05924caee

  • SHA256

    116e97fee9e7e223ac40e057e55bc63f53a002bff3427341a782418ed0f8fed8

  • SHA512

    21f5cb7a8bc804b061864e91fc4f56db4428fd19eaf04c5374afc8686cc8edd0a903247fc60e5fa22901a84c0fab785c1598ff2fc75443fe371fe74e7c8193fb

  • SSDEEP

    12288:+P07VIp/L2R23wAiMtX/ekcf3sHTlFtAT/8GIYbCJb2ex9tfV9IfsQ8FJ7uqn4:+P0Z+yIBX/ek4szaejtf3z7u+4

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Trojan-Spy.MSIL.Stealer.gen-116e97fee9e7.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections