Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    RuntimeBroker.exe

  • Size

    879KB

  • MD5

    aa76af47250e8b99b320fa30aeedda8e

  • SHA1

    d0a89102292da1e062e02fe62ea7fa33aeb3e364

  • SHA256

    86f04162efb440fb618f751c4c12505e1c35fe403685035f662c46202a494d5b

  • SHA512

    b6475909cf396dd48f0f68962f96fe32fd8de9ca2b3b9429411c8bc989584d2d818095939f39b63037aca722e621f046db479c461e04e56d7972747775c2f575

  • SSDEEP

    24576:aOfkzP+4nINN6GJybQDNQqNFMClkSoa6:TkhnCQQD5HG

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RuntimeBroker.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections