General

  • Target

    EYBfU.exe

  • Size

    783KB

  • MD5

    8d5d22e90c5fd99adee7e582f57fd4e6

  • SHA1

    f70f4f6456fb8b823430de97c0e32c479698f9e0

  • SHA256

    54de552295e919218a7d43a1d0114bae169a79a1963113d615fd8bce428b385d

  • SHA512

    2bed946df50fe47001633860644ef1cb1f6f43b64f33ba6ab9a2e854f75e2afefba33b2fcf18035bdc9dffbadc3884bfbe0758250fed652b0d55353c2446330b

  • SSDEEP

    12288:GqnOYxdAgpoNeF91rg5iFdr0yQ9gYx+EIpakCYJRU7Q9bWoFzqK:G+OQbpbgsFdAyQvzSqaq8q

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • EYBfU.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections