General

  • Target

    HEUR-Backdoor.MSIL.LightStone.gen-6974f159cb6.exe

  • Size

    1.3MB

  • MD5

    5d329190630c5c051e1b2c4ad4c69abd

  • SHA1

    0227d4e1597ca90477cad5fc3a960f3590457031

  • SHA256

    6974f159cb6e056fd9675ec4ecb6d271a7d6bb69711a295be593091d3bcb9e45

  • SHA512

    0b0f745634bbab4234b0b8b9e5f80c9c99870fe0647afcfa88ffe1990012e9968bcf6f722d7f87c54e6cc7ca566e910a605688e7825a9b82629114f67dae69b9

  • SSDEEP

    24576:O2G/nvxW3WDkIavL5BH7pdKk+BSjLeuNVg+4u:ObA3BI+BH9uB+r

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Backdoor.MSIL.LightStone.gen-6974f159cb6.exe
    .exe windows:5 windows x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections