General

  • Target

    HEUR-Trojan-Spy.MSIL.Stealer.gen-bc76c486fd4c.exe

  • Size

    1.3MB

  • MD5

    be60d8d49e9890d487437534c8705095

  • SHA1

    130e15c144dffe465b40e2bcf6a2b4276c3d4fd7

  • SHA256

    bc76c486fd4cb088e781642091e9b233e52b7964a8f2c16ad15b0cc63bec9775

  • SHA512

    60477e7ec43315f53bf4150685246598f4a473d8b9f4b21f649a4e9d7d9317b1e7b9e3329e98eed8f1a76b8d2a145eee899f5dc91703c8ae2fcdced85b190975

  • SSDEEP

    24576:H2G/nvxW3WW0SQs49Wyj+IHJFycVtCucN0eEtOzW+4K:HbA3eSQs4Xj+RbN0iX

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Trojan-Spy.MSIL.Stealer.gen-bc76c486fd4c.exe
    .exe windows x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections