dcrat | HEUR-Backdoor[.]MSIL[.]DCRat[.]gen-90b1c605b3a6431b1dcc3707f976fcb71181109590403df8fcaa17eee16904dc

General

Target

HEUR-Backdoor.MSIL.DCRat.gen-90b1c605b3a6431b1dcc3707f976fcb71181109590403df8fcaa17eee16904dc
Size

2.0MB
MD5

d2d681fe198fb1e5cedfe2d7d163e61a
SHA1

15f50cd3233206e2fd1d8cf8398e31f4fb0ca1ef
SHA256

90b1c605b3a6431b1dcc3707f976fcb71181109590403df8fcaa17eee16904dc
SHA512

79979f349b2f594de0e5267f5a6a7ee2290f7ba219d99ff249621aa07c5091004bd2870b6576506d755e99578a963d38216f1746aa3d9abc370aa76720315a63
SSDEEP

49152:tqHEuTrhUqQcvwHnX9B0gQ1TgqAsoqbBmXob3:IHrUqQcvQnX9B0gQ1TgqAsRVmXob3

Score

10^/10

rat dcrat

DCRat payload 1 IoCs

Detects payload of DCRat, commonly dropped by NSIS installers.

resource	yara_rule
sample	dcrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Backdoor.MSIL.DCRat.gen-90b1c605b3a6431b1dcc3707f976fcb71181109590403df8fcaa17eee16904dc