General

  • Target

    Browserdriversaves.exe

  • Size

    1.5MB

  • MD5

    f91e28b9b3077eef27d595776e88f1c1

  • SHA1

    167a9cf8f304d701cce39a1f28dc8c4d8f681290

  • SHA256

    2ff9825f0d157c0bf51f1ea4cef9da8107f242db56ce1b022b5b41f052fce54c

  • SHA512

    f5e86c53729f7d0fbb178f69a2e635e3689770dbb31e9676c5ded2fb68146f642ab40b6798afce3fd1d9320d239e3b8df7287f4fd139bd31cd7da42286ec776c

  • SSDEEP

    24576:zVyhnOvpynRjx3lJeumGW9r4at4iQEkyFrM7jsWdf1G3qoVn2i55cq:pKRrJeaiQSKjsWXG3Rn2q5

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Browserdriversaves.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections