General

  • Target

    WlablerTeleport.exe

  • Size

    2.3MB

  • MD5

    e9d9246180b656402199c96bc29dbc24

  • SHA1

    b669329d585ae0364419b6c63305534d95a58928

  • SHA256

    5bdcdde18af47758187caeceacbc9652d4f520331756433ff411be685472c3bc

  • SHA512

    0cec915d1791a57e7e481a56e1fb3b546ab88cec8562274efd4fd204e9714e0f85e6bcdb69eac4dab611b6daad2d1694455657f7a1e545a74bbff82214e1a68b

  • SSDEEP

    24576:U2G/nvxW3Ww0tvI2L6rk8n5xA/b3MktBK4HIQgVBjkGXQIsd+cdkvDjHr:UbA30g06rHAT39L/QNnWKr

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WlablerTeleport.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections