Overview

overview

10

Static

static

10

2a16891494...f5.exe

windows7-x64

10

2a16891494...f5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2a16891494cd20fb9f5f3202c24ed4f5.exe

  • Size

    1.0MB

  • MD5

    2a16891494cd20fb9f5f3202c24ed4f5

  • SHA1

    1b60d71d5e723b0bf1e2334db84901876eb12d14

  • SHA256

    20bd725ede571673a32e100ffb790347960eb364f1061ddf1cf1426fc402f5e1

  • SHA512

    ffdf1accb6ac5a4171574695ad1e972c27d31c71603ed9db8bcb8d126e08121afd9d359519e7f29e0af501ebde6f31c6864a08d32bef8ff6ef6229b85fdc5129

  • SSDEEP

    12288:+u5YwU/SJ68g45t348EKN6+2umEosu6usXSqBORZsC4CgMuP/bByhsjs527HmhTl:+iU/SWOa8UEolsCNabcugs7YTl

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a16891494cd20fb9f5f3202c24ed4f5.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections