General

  • Target

    plugg.exe

  • Size

    3.0MB

  • MD5

    005c50a83f72a661ccbb2a5990136182

  • SHA1

    ebc05b8014648b81a0e8ba39df20dd80ed4dde2e

  • SHA256

    8d88b5b973f15d393ccedb94557f0d5bb977e11597d2f570bc2c08a869260107

  • SHA512

    ec333e99812f3bc805d6720c41d69dd86e49e6928c1edb93a550e7e9cefc57d200748a4afa42db072fb9e9945a12e506302fbc6cca69a6bb4f855a9c380925d2

  • SSDEEP

    49152:hbA39EuMcBU9fQVn+i3qCAPY39booEqvlC3p6xkyUVm2De:hbWMcBHV+iJAQ3mGvlCAu1bq

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • plugg.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections