Overview

overview

10

Static

static

10

yFmXcyFCsF...sz.exe

windows7-x64

10

yFmXcyFCsF...sz.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    yFmXcyFCsFhR4NpIXsz.exe

  • Size

    1.5MB

  • MD5

    592485f45b8f620b47c0a08f5619efe0

  • SHA1

    d9886fa4888a0321f42cdc124a73bb8fa8e23a1a

  • SHA256

    aa3f635e15b1e53709d01a66e31958b649d40122541f1aa207805f0ce31f0fe9

  • SHA512

    78c35c081f56c632196f38227ca5a3d9f3b08661f8816e2ea9ea3364496ef48a1dca643660f6a7b761938fc21722b507e161aa4422f0a73ecf211d5b18f9fc15

  • SSDEEP

    24576:Lex5rAoPwujnJN0bArlSm/iwCU7IINgSr59bOFJjcOZCaI:L89Ak+mlWw11Ng6al

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • yFmXcyFCsFhR4NpIXsz.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections