Overview

overview

10

Static

static

10

638809035D...96.exe

windows7-x64

10

638809035D...96.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    638809035DD3FAFC1377FFD71F4A5296.exe

  • Size

    3.4MB

  • MD5

    638809035dd3fafc1377ffd71f4a5296

  • SHA1

    1a5920fc6fcb463288bc07023ad5840ebbca4b11

  • SHA256

    1dd3edb673a05c19521b785935f8e803ec5f3104883db80f1a671182e23c4274

  • SHA512

    3ddd44ead391ab72c5fe9476608a1c908f983ff6dacb499b27e21bb638d1da88951335262562ede806100cb83d72283bf6446e02a422e3a06b567e7406dbc896

  • SSDEEP

    98304:uTbZZD8r18Vx4IuzrIXltEDjm/PtLORlm0:W3DY2/IgjEu4Q

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 638809035DD3FAFC1377FFD71F4A5296.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections