Overview

overview

10

Static

static

10

0bb6e434a9...39.exe

windows7-x64

10

0bb6e434a9...39.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0bb6e434a9d037caa0030ba007831d39.exe

  • Size

    1.2MB

  • MD5

    0bb6e434a9d037caa0030ba007831d39

  • SHA1

    015666c3d478ba1867b8e596e5156f5e985432ac

  • SHA256

    dc4a96b2332b63be986e022a98d1461ba3c07cf2dec199328f5bf5706e65cd70

  • SHA512

    8ac2a9281639b50c755cd7e43b16e4cae09480f46947814abedf7f3f005c62ca3d5b2f20c41c0f0b4ac1944b5c9d5b941e874e603acd0d108fe77349ff8c71c6

  • SSDEEP

    24576:tX4BThjHEeNFAYU4Jtx5YUxeS80l7hemc:JWFE6UkUS80r

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0bb6e434a9d037caa0030ba007831d39.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections