Overview

overview

10

Static

static

10

HEUR-Troja...c1.exe

windows7-x64

10

HEUR-Troja...c1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    HEUR-Trojan-Spy.MSIL.Stealer.gen-4e48285959c1.exe

  • Size

    1.3MB

  • MD5

    ccd75dc88dd86f8d5064f7776171d642

  • SHA1

    cf1b737a4da6f9cfe2cebde015df1be6ee48df3c

  • SHA256

    4e48285959c170e0e69c81e6eeab39c1f9d167c7ed4a8f8d898481a43d9ec03a

  • SHA512

    0a8e58876b8c3585122e39779ccdfbf94684607397ebfa91be2ea788fe325156fd8a7923c8337e3595fcdd0a04514e84a49579766e7e1abfe6cb02e96790dd32

  • SSDEEP

    24576:H2G/nvxW3Wr00SP0Z+yIBX/ek4szaejtf3z7u+45:HbA3Ulw0Z+ck4Orle

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Trojan-Spy.MSIL.Stealer.gen-4e48285959c1.exe
    .exe windows x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections