Overview

overview

10

Static

static

10

cf.exe

windows7-x64

10

cf.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cf.exe

  • Size

    1.5MB

  • MD5

    f08e3c698a78d36cf2205af33d9c8c41

  • SHA1

    6fa3afdf39c1904e5117906fa2941c9658686779

  • SHA256

    cfee71819392779f8b9f228c2601ff9a89b36c9f3bf56350cedc35bbf957f4a9

  • SHA512

    689ae446cf595cd6fd0eac06f289c1da59770281da208a45d2bb6103e05cd13c10cf1773121cd01b113b4460250b5b3c93a2d7f15e23678d4d5109ffa52cf34f

  • SSDEEP

    24576:5U5Lsj26Yfv66b/zlf1v/4/fFQB7O/4G3chNcpwiCo91qUVRddMY/z3PLO3:5WXv3b/Zd42I4GchjiCURNTL

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cf.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections