Overview

overview

10

Static

static

10

XVmYAN5gE5Zx0Pz.exe

windows7-x64

10

XVmYAN5gE5Zx0Pz.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XVmYAN5gE5Zx0Pz.exe

  • Size

    1.5MB

  • MD5

    73949a89bc3f0001f35505e5a6e7f571

  • SHA1

    42534d6a5490c9aad5956b6ef98bb9c14c9724d6

  • SHA256

    5420a52b2fd6ea953a44e49cfce57fe4827436da7fe02a68154e71fe5cf4aa19

  • SHA512

    35e5e85ba4393bfb5635155e0a3317f3f12a797c5a55f2d5d25540eb4feae95d502f422f3dc3cc6bea6236bf8e4a8cde0ba57ff14c636bdf7118edf17a0fc915

  • SSDEEP

    24576:Dex5rAoPwujnJN0bArlSm/iwCU7IINgSr59bOFJjcOZCaI:D89Ak+mlWw11Ng6al

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XVmYAN5gE5Zx0Pz.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections