Resubmissions

04-03-2024 05:33

240304-f84jnsca52 10

04-03-2024 04:18

240304-exd9zahe9z 10

General

  • Target

    db30c4e68692e4f54315332311162e76.bin

  • Size

    67.1MB

  • MD5

    db30c4e68692e4f54315332311162e76

  • SHA1

    4af95bdba555279f3a9a91d60d3645167cab1ba4

  • SHA256

    de08c69d06b2f176058aa6001b9f9195ef9599f1f79b783e21762046258583d3

  • SHA512

    524b697b466ba99345a27d316386c3ad9871b248ba61df35b90673a74089e61b0a81b161f225e0695f11182574b3a9a5d0c8fa21146d4d6f1583f7400f042b38

  • SSDEEP

    1572864:Jw+8QG00TenpkLLb6XGnKhycHVFh4paYOYKXz4W+hMq4JpMseF5m:WM0TeS/b62RcHRpCDxFc

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 97 IoCs

    Checks for missing Authenticode signature.

Files

  • db30c4e68692e4f54315332311162e76.bin
    .zip

    Password: infected

  • dcrat/123.bat
  • dcrat/DCRat.exe
    .exe windows:4 windows x64 arch:x64

    Password: infected


    Headers

    Sections

  • dcrat/data/7zxa.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    b56c6d8dc50f73376215a3b3ddce91c0


    Headers

    Imports

    Exports

    Sections

  • dcrat/data/DCRAC.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • dcrat/data/DCRCC.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • dcrat/data/Default.SFX
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections

  • dcrat/data/NCC2.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    f4d8783cad3f11045aa4e2ccd348ec7b


    Headers

    Imports

    Exports

    Sections

  • dcrat/data/NCC3.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    7520e044195b1728541d87932e3d3d25


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dcrat/data/NCCheck.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Exports

    Sections

  • dcrat/data/Rar.exe
    .exe windows:5 windows x86 arch:x86

    44d2677e8e5bfc0b36e493c644c96d3e


    Code Sign

    Headers

    Imports

    Sections

  • dcrat/data/RarExt.dll
    .dll windows:5 windows x86 arch:x86

    0b0d2ebfb28acfbe9b3d782dfbd69718


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dcrat/data/RarExt64.dll
    .dll windows:5 windows x64 arch:x64

    4757bf030e54b5b102bfa36ff111af95


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • dcrat/data/WinCon.SFX
    .exe windows:5 windows x86 arch:x86

    6be7eb2c55cb5cc119c0ff80a16fbc82


    Headers

    Imports

    Sections

  • dcrat/data/Zip.SFX
    .exe windows:5 windows x86 arch:x86

    ae9f6a32bb8b03dce37903edbc855ba1


    Headers

    Imports

    Sections

  • dcrat/data/dnlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/data/dotNET_Reactor.Console.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • dcrat/data/dotNET_Reactor.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • dcrat/data/enc.vbe
    .vbe .jse
  • dcrat/data/kll.temp
  • dcrat/data/upx.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • dcrat/data/wRar.exe
    .exe windows:5 windows x86 arch:x86

    76b13065110dab2258940c9960d7d4ce


    Code Sign

    Headers

    Imports

    Sections

  • dcrat/design/ActiveWindowNotifierCommand.json
  • dcrat/design/BlockInput.json
  • dcrat/design/ClipboardLoggerControl.json
  • dcrat/design/ClipperTableAddon.json
  • dcrat/design/CrashLoggerDesign.json
  • dcrat/design/CryptoStealerTableAddon.json
  • dcrat/design/DeleteAll_legacy.json
  • dcrat/design/FakeSteamWindowsControl.json
  • dcrat/design/FileGrabberTableAddon.json
  • dcrat/design/FileSearcherControl.json
  • dcrat/design/HostsEditorCommands.json
  • dcrat/design/PerformanceCounterDesign.json
  • dcrat/design/PluginsLoader_legacy.json
  • dcrat/design/ProcessKillerCommand.json
  • dcrat/design/RegEditorControl.json
  • dcrat/design/RunOncePanel.json
  • dcrat/design/UserPingCounterTableAddon.json
  • dcrat/install.php
  • dcrat/lib/IIIllllIlIlllIlIIIIlllIlIlIlllllIIIlIIllllIIIlIllIIlIIllllIIllllllIIlIIIIIIlllIIIlIllllllIIllIlIllIlllIllIlIIIIIIIIllllI.jar
    .jar
  • dcrat/lib/IIIllllIlIlllIlIIIIlllIlIlIlllllIIIlIIllllIIIlIllIIlIIllllIIllllllIIlIIIIIIlllIIIlIllllllIIllIlIllIlllIllIlIIIIIIIIllllIIilIl.jar
    .jar
  • dcrat/lib/IIlIlIllIIlIIllIIllIIlIIIllIlIlIlIIIIlIlIllIIlIIllIIIIIllIIIIlIIIlIIlIIlIIlIllIIlllIIIllIIIlIIlIllllIllIIIIlIIIlIllllllI.jar
    .jar
  • dcrat/lib/IlIIlIllllIIIIIlIlllIllIlIlIIIIIlIIIlIlIlllIIllIllIIIIIIlIIlllIIIlIIIlllIIIlllllIlIlIlllllIIlIllIIlIIlIIlIIIlllllllIlIII.jar
    .jar
  • dcrat/lib/IlIlIIIIIIIlIlllllllIllIIlIIllIllllIIIlIIIlIlIIlIIlIIlIllIlllIlIlIIllIIlIIIIIIIlIIIIIIIIIlIlllIIllIlIIlIIIlIlIlllIIIIIIl.jar
    .jar
  • dcrat/lib/IlIllIIllllllllIlIIlllllIIIIllIIIlIIlllIIllIIllllIIllIlIIIlIIIIlIIIIIlllllllIllIIlIlIllIIlIlIlIIllIlIllIIIlIIIIlIllIIIIl.jar
    .jar
  • dcrat/lib/IllIIIIllIlIIIIlIlIllIIlIIllIIlIllIIlllllIlllIllIlIIlIIlllIIlIlIlIllIllIIlIIIlIIIllIIIIIllIIlllllIlIIIIIlIIIIIIIIIIIIlII.jar
    .jar
  • dcrat/lib/lIIllIIlIlllIlIlllIlIIlIIIlllllIIlIlIIllIllIlIlllIlIIlIlIlIIllIlIIIIIllIIlIIlIIlIIllIIIlIIllIlIIIIlIlIIlIIlIllIIlIIlIlIl.jar
    .jar
  • dcrat/lib/llIlIIIIlIlIlllllIlIIllllIIIlIlIllllIIllllIlllIIlllllIIlIlllIIIIIIlIIllIIIlIlIlllIlIIIlIIIIIllIlllIlllIIllIIllIlIlIIlllI.jar
    .jar
  • dcrat/lib/llIlIlIIIllllIIIllllllllllIllIlIlllIIlllIIlllIIllIIllllIlllIIIIIllllIIlllIIllIIIIlIlIlIlIIIlIIIlIlIlIlIIlllIIlllIlIlIlII.jar
    .jar
  • dcrat/lib/lllIIlIlIIlIIllllIIllllIIlIllllIIIlIllllIIllIIIlllIIIIIIlIIlllIIllIllIIlllIlIIlIlIlllIIlllIlllIlIIlIIIllIlllIIIlIIIIIlll.jar
    .jar
  • dcrat/lib/lllIlIIIIIlIllIlIlIIllIlIIIlIIllIllllIIIIIllIlllIllIIllIIllIllIllIIlIlllllIIlIllIllIIlIIlIIIllIlIlIIlIIIIIIIllIIlllIllIl.jar
    .jar
  • dcrat/lib/llllIlIIIIIllllIlIIIlIllIlIIIllllIIIllIllllIIlllIlIIIlllIIlIlIlllIIlIIIIlIIIIlllIIlIIlIlIIIIIIIIllllIllIlIIIlIllIlIlIIll.jar
    .jar
  • dcrat/lib/llllIlIIlIllllIlIlIIIlIIIlIllIlIIIIlIlIIlIlIIIIllIIlIIllIIIllllIlIllIlllllIIIIIIIIllIllIlIlllllllIllIIIllllIIllIIlIllIll.jar
    .jar
  • dcrat/php/README.md
  • dcrat/php/deplister.exe
    .exe windows:6 windows x64 arch:x64

    998b5ac1ce55cd48fbbea8f2bc89769c


    Headers

    Imports

    Sections

  • dcrat/php/dev/php8.lib
  • dcrat/php/ext/php_bz2.dll
    .dll windows:6 windows x64 arch:x64

    858bcb047f0c9c701270f0ad49b2d546


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_com_dotnet.dll
    .dll windows:6 windows x64 arch:x64

    f623687e33b5cb80c0846ed4a6787e6c


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_curl.dll
    .dll windows:6 windows x64 arch:x64

    c0b7cbf073ea7c81b74a6caf33fffcf0


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_dba.dll
    .dll windows:6 windows x64 arch:x64

    29231f19319ab4f9239da1e07bef2752


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_dl_test.dll
    .dll windows:6 windows x64 arch:x64

    85e568245b32d849bfb57a1240f1877c


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_enchant.dll
    .dll windows:6 windows x64 arch:x64

    4e9b52e9fb19520739812d2e25a7f266


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_exif.dll
    .dll windows:6 windows x64 arch:x64

    5de243cf1335bd037423faa84cc57f02


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_ffi.dll
    .dll windows:6 windows x64 arch:x64

    4b55a06a1e0f3d3dbbc3105e085d5c86


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_fileinfo.dll
    .dll windows:6 windows x64 arch:x64

    c3cde8843de0806ba41c8cb2de7d9a84


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_ftp.dll
    .dll windows:6 windows x64 arch:x64

    fb4f6d213741c49d94e1990f7a793ea6


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_gd.dll
    .dll windows:6 windows x64 arch:x64

    cf39ff985ff12d4c40a3e0757c156fef


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_gettext.dll
    .dll windows:6 windows x64 arch:x64

    669ea68ad0c0c0ecaaf29ecbac403d72


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_gmp.dll
    .dll windows:6 windows x64 arch:x64

    7a9b89a03cea33e02e7d85acea575850


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_imap.dll
    .dll windows:6 windows x64 arch:x64

    de1fb7b1f149de859862e003cccfa536


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_intl.dll
    .dll windows:6 windows x64 arch:x64

    5e38334654afe2e708a90705f2f36934


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_ldap.dll
    .dll windows:6 windows x64 arch:x64

    f96ac03cb20a91f7a38e796e17506081


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_mbstring.dll
    .dll windows:6 windows x64 arch:x64

    70ee46c662bb1c472a25db0141d8ebfa


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_mysqli.dll
    .dll windows:6 windows x64 arch:x64

    9c746a6af242ed7c95dddb021907bebb


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_oci8_19.dll
    .dll windows:6 windows x64 arch:x64

    70a3f68992867d40685b49a2ca66c8b1


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_odbc.dll
    .dll windows:6 windows x64 arch:x64

    50d0f535d3e345548013c58cd35958a5


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_opcache.dll
    .dll windows:6 windows x64 arch:x64

    e4a89e72e508a08144ed1ecee9e46d93


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_openssl.dll
    .dll windows:6 windows x64 arch:x64

    bce83f0f00e24638c5c3107c60e29ba2


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_pdo_firebird.dll
    .dll windows:6 windows x64 arch:x64

    f93ec0205739ce5e0ec80e923bd7965e


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_pdo_mysql.dll
    .dll windows:6 windows x64 arch:x64

    1dd214c2edffe02e3b172e209ec1dc14


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_pdo_oci.dll
    .dll windows:6 windows x64 arch:x64

    c1aa0dfc8cd92f04740523ced35dce87


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_pdo_odbc.dll
    .dll windows:6 windows x64 arch:x64

    3adc6866d8fa98f65291cc6126611322


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_pdo_pgsql.dll
    .dll windows:6 windows x64 arch:x64

    62dec38d00837d8ddfa58c0f0c943175


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_pdo_sqlite.dll
    .dll windows:6 windows x64 arch:x64

    f032a4a27888b8344ad86e859386a1eb


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_pgsql.dll
    .dll windows:6 windows x64 arch:x64

    8b3766e0a704ccce9076e9d80dd04be3


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_shmop.dll
    .dll windows:6 windows x64 arch:x64

    18d92d2fee3614b2d3c451c9905d34d1


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_snmp.dll
    .dll windows:6 windows x64 arch:x64

    5c6d5a817612e30555bb766cd9061f7d


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_soap.dll
    .dll windows:6 windows x64 arch:x64

    4b10bc461c4424f80ecad36a5799747f


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_sockets.dll
    .dll windows:6 windows x64 arch:x64

    ac354f838d3bc68c045249952f1a0691


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_sodium.dll
    .dll windows:6 windows x64 arch:x64

    3bc4e0a55fa9116eed21192d0e8018ad


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_sqlite3.dll
    .dll windows:6 windows x64 arch:x64

    77e317d1c99aeebc7d55694c96fa5a2a


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_sysvshm.dll
    .dll windows:6 windows x64 arch:x64

    6c2fb134bff5d6f600c390f889e0d3d6


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_tidy.dll
    .dll windows:6 windows x64 arch:x64

    e1b7cad4d9697c49418f10461529c60b


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_xsl.dll
    .dll windows:6 windows x64 arch:x64

    1263e1c973b4b95dfbc6f1996eaa0dd4


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_zend_test.dll
    .dll windows:6 windows x64 arch:x64

    f7540a3dc80d44bb0b840154082625c8


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/ext/php_zip.dll
    .dll windows:6 windows x64 arch:x64

    69f7f7c9783b9d34a27876e355fabb60


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/extras/ssl/legacy.dll
    .dll windows:6 windows x64 arch:x64

    783fb5c6bcd5fe061f884daa1823e53f


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/extras/ssl/openssl.cnf
  • dcrat/php/glib-2.dll
    .dll windows:6 windows x64 arch:x64

    f97499326d070979651d83a0a6ca0500


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/gmodule-2.dll
    .dll windows:6 windows x64 arch:x64

    dd3969e7102609331d83594201dc28c2


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/icudt71.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • dcrat/php/icuin71.dll
    .dll windows:6 windows x64 arch:x64

    34c9337a87558e7d2464c70de0832e4e


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/icuio71.dll
    .dll windows:6 windows x64 arch:x64

    a4deaacad12ec6d8ca09900284ce35ec


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/icuuc71.dll
    .dll windows:6 windows x64 arch:x64

    8155fe4683646ed9da197807c0eb1aad


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/lib/enchant/libenchant2_hunspell.dll
    .dll windows:6 windows x64 arch:x64

    836b9c0311d383d9ef0028dacb290303


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    bc56edce1c9c476b634393247734974c


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/libenchant2.dll
    .dll windows:6 windows x64 arch:x64

    7fac286fbec49af426309c8b3956cf61


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/libpq.dll
    .dll windows:6 windows x64 arch:x64

    dfa7590ef54ae078f2a7a7fd1eebc6f8


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/libsasl.dll
    .dll windows:6 windows x64 arch:x64

    e6a6094de54bf05759b47e854fc02b59


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/libsodium.dll
    .dll windows:6 windows x64 arch:x64

    d78711e4cfc87f248be0c106a2086e2d


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/libsqlite3.dll
    .dll windows:6 windows x64 arch:x64

    0bb598215ca79504fb9890ac13be41b9


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/libssh2.dll
    .dll windows:6 windows x64 arch:x64

    86a9876db9afdd5968217368a793f5b7


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    a5db4944ca4c6446f5fbd8bbdc2b1577


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/license.txt
  • dcrat/php/news.txt
  • dcrat/php/nghttp2.dll
    .dll windows:6 windows x64 arch:x64

    06a324d48b897630c544dbbdc07cc94b


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/phar.phar.bat
  • dcrat/php/pharcommand.phar
    .js
  • dcrat/php/php-cgi.exe
    .exe windows:6 windows x64 arch:x64

    f2fc6af711aea088601938cad0bf67ca


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/php-win.exe
    .exe windows:6 windows x64 arch:x64

    bca4e3493c8cdbd07b6a706b0d839166


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/php.exe
    .exe windows:6 windows x64 arch:x64

    7d82461880c440e62583bc0e80f851b5


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/php.ini-development
  • dcrat/php/php.ini-production
  • dcrat/php/php8.dll
    .dll windows:6 windows x64 arch:x64

    d9e6befdebc6e31a18163e4a8d88559f


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/php8embed.lib
  • dcrat/php/php8phpdbg.dll
    .dll windows:6 windows x64 arch:x64

    a8b625a35415488ff85c7767f0c3131e


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/phpdbg.exe
    .exe windows:6 windows x64 arch:x64

    682388d07e62bf51776026c8c902a9d9


    Headers

    Imports

    Exports

    Sections

  • dcrat/php/readme-redist-bins.txt
  • dcrat/php/snapshot.txt
  • dcrat/plugins/ActiveWindowNotifier.plg
  • dcrat/plugins/ActiveWindowNotifier/ActiveWindowNotifier.dclib
  • dcrat/plugins/ActiveWindowNotifier/ActiveWindowNotifierConfig.json
  • dcrat/plugins/ActiveWindowNotifier/configuration.json
  • dcrat/plugins/ActiveWindowNotifier/fav.png
    .png
  • dcrat/plugins/AntiAnalysisPlugin.plg
  • dcrat/plugins/AntiAnalysisPlugin/AntiAnalysis.json
  • dcrat/plugins/AntiAnalysisPlugin/AntiAnalysisPlugin.dclib
  • dcrat/plugins/AntiAnalysisPlugin/configuration.json
  • dcrat/plugins/AntiAnalysisPlugin/fav.png
    .png
  • dcrat/plugins/Audio_native.plg
  • dcrat/plugins/Audio_native/Audio_native.dclib
  • dcrat/plugins/Audio_native/configuration.json
  • dcrat/plugins/Audio_native/fav.png
    .png
  • dcrat/plugins/BSoDProtection.plg
  • dcrat/plugins/BSoDProtection/BSoDProtection.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/BSoDProtection/configuration.json
  • dcrat/plugins/BSoDProtection/fav.png
    .png
  • dcrat/plugins/BlockInputPlugin.plg
  • dcrat/plugins/BlockInputPlugin/BlockInputPlugin.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/BlockInputPlugin/configuration.json
  • dcrat/plugins/BlockInputPlugin/fav.png
    .png
  • dcrat/plugins/BrowsersStealer_native.plg
  • dcrat/plugins/BrowsersStealer_native/BrowsersStealer_native.dclib
  • dcrat/plugins/BrowsersStealer_native/configuration.json
  • dcrat/plugins/BrowsersStealer_native/fav.png
    .png
  • dcrat/plugins/BuildInstallationTweaksPlugin.plg
  • dcrat/plugins/BuildInstallationTweaksPlugin/BuildInstallationTweaksConfig.json
  • dcrat/plugins/BuildInstallationTweaksPlugin/BuildInstallationTweaksPlugin.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/BuildInstallationTweaksPlugin/configuration.json
  • dcrat/plugins/BuildInstallationTweaksPlugin/fav.png
    .png
  • dcrat/plugins/ClientsStealer_native.plg
  • dcrat/plugins/ClientsStealer_native/ClientsStealer_native.dclib
  • dcrat/plugins/ClientsStealer_native/configuration.json
  • dcrat/plugins/ClientsStealer_native/fav.png
    .png
  • dcrat/plugins/ClipboardLogger.plg
  • dcrat/plugins/ClipboardLogger/ClipboardLogger.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/ClipboardLogger/configuration.json
  • dcrat/plugins/ClipboardLogger/fav.png
    .png
  • dcrat/plugins/Clipper.plg
  • dcrat/plugins/Clipper/Clipper.dclib
  • dcrat/plugins/Clipper/ClipperConfig.json
  • dcrat/plugins/Clipper/configuration.json
  • dcrat/plugins/Clipper/fav.png
    .png
  • dcrat/plugins/CountryBlackList.plg
  • dcrat/plugins/CountryBlackList/CountryBlackList.dclib
  • dcrat/plugins/CountryBlackList/CountryBlackListConfig.json
  • dcrat/plugins/CountryBlackList/configuration.json
  • dcrat/plugins/CountryBlackList/fav.png
    .png
  • dcrat/plugins/CrashLogger.plg
  • dcrat/plugins/CrashLogger/CrashLogger.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/CrashLogger/configuration.json
  • dcrat/plugins/CrashLogger/fav.png
    .jpg
  • dcrat/plugins/CryptoStealer.plg
  • dcrat/plugins/CryptoStealer/CryptoStealer.dclib
  • dcrat/plugins/CryptoStealer/CryptoStealerConfig.json
  • dcrat/plugins/CryptoStealer/configuration.json
  • dcrat/plugins/CryptoStealer/fav.png
    .png
  • dcrat/plugins/DisableUAC.plg
  • dcrat/plugins/DisableUAC/DisableUAC.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/DisableUAC/configuration.json
  • dcrat/plugins/DisableUAC/fav.png
    .png
  • dcrat/plugins/FakeSteamWindows.plg
  • dcrat/plugins/FakeSteamWindows/FakeSteamWindows.dclib
  • dcrat/plugins/FakeSteamWindows/configuration.json
  • dcrat/plugins/FakeSteamWindows/fav.png
    .png
  • dcrat/plugins/FileGrabberPlugin.plg
  • dcrat/plugins/FileGrabberPlugin/FileGrabber.json
  • dcrat/plugins/FileGrabberPlugin/FileGrabberPlugin.dclib
  • dcrat/plugins/FileGrabberPlugin/configuration.json
  • dcrat/plugins/FileGrabberPlugin/fav.png
    .png
  • dcrat/plugins/FileSearcher.plg
  • dcrat/plugins/FileSearcher/FileSearcher.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/FileSearcher/configuration.json
  • dcrat/plugins/FileSearcher/fav.png
    .png
  • dcrat/plugins/ForceAdmin.plg
  • dcrat/plugins/ForceAdmin/ForceAdmin.dclib
  • dcrat/plugins/ForceAdmin/configuration.json
  • dcrat/plugins/ForceAdmin/fav.png
    .png
  • dcrat/plugins/Fun_native.plg
  • dcrat/plugins/Fun_native/Fun_native.dclib
  • dcrat/plugins/Fun_native/configuration.json
  • dcrat/plugins/Fun_native/fav.png
    .png
  • dcrat/plugins/HiddenRemoteDesktop_native.plg
  • dcrat/plugins/HiddenRemoteDesktop_native/HiddenRemoteDesktop_native.dclib
  • dcrat/plugins/HiddenRemoteDesktop_native/configuration.json
  • dcrat/plugins/HiddenRemoteDesktop_native/fav.png
    .png
  • dcrat/plugins/HostsEditor.plg
  • dcrat/plugins/HostsEditor/HostsEditor.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/HostsEditor/HostsEditorDesign.json
  • dcrat/plugins/HostsEditor/configuration.json
  • dcrat/plugins/HostsEditor/fav.png
    .png
  • dcrat/plugins/Keylogger_native.plg
  • dcrat/plugins/Keylogger_native/ConfigKeylogger_native.json
  • dcrat/plugins/Keylogger_native/Keylogger_native.dclib
  • dcrat/plugins/Keylogger_native/configuration.json
  • dcrat/plugins/Keylogger_native/fav.png
    .png
  • dcrat/plugins/MessageOnStart.plg
  • dcrat/plugins/MessageOnStart/MessageOnStart.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/MessageOnStart/MessageOnStartConfig.json
  • dcrat/plugins/MessageOnStart/configuration.json
  • dcrat/plugins/MessageOnStart/fav.png
    .png
  • dcrat/plugins/MiscInfoGrabber.plg
  • dcrat/plugins/MiscInfoGrabber/MiscInfoGrabber.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/MiscInfoGrabber/MiscInfoGrabberConfig.json
  • dcrat/plugins/MiscInfoGrabber/configuration.json
  • dcrat/plugins/MiscInfoGrabber/fav.png
    .png
  • dcrat/plugins/OBSGrabber.plg
  • dcrat/plugins/OBSGrabber/OBSGrabber.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/OBSGrabber/configuration.json
  • dcrat/plugins/OBSGrabber/fav.png
    .png
  • dcrat/plugins/PerformanceCounter.plg
  • dcrat/plugins/PerformanceCounter/PerformanceCounter.dclib
  • dcrat/plugins/PerformanceCounter/configuration.json
  • dcrat/plugins/PerformanceCounter/fav.png
    .png
  • dcrat/plugins/ProcessKiller.plg
  • dcrat/plugins/ProcessKiller/ProcessKiller.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/ProcessKiller/ProcessKillerConfig.json
  • dcrat/plugins/ProcessKiller/configuration.json
  • dcrat/plugins/ProcessKiller/fav.png
    .png
  • dcrat/plugins/RegEditorPlugin.plg
  • dcrat/plugins/RegEditorPlugin/RegEditorPlugin.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/RegEditorPlugin/configuration.json
  • dcrat/plugins/RegEditorPlugin/fav.png
    .png
  • dcrat/plugins/RemoteCMD_native.plg
  • dcrat/plugins/RemoteCMD_native/RemoteCMD_native.dclib
  • dcrat/plugins/RemoteCMD_native/configuration.json
  • dcrat/plugins/RemoteCMD_native/fav.png
    .png
  • dcrat/plugins/RunOnce.plg
  • dcrat/plugins/RunOnce/RunOnce.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/RunOnce/RunOnce_cfg.json
  • dcrat/plugins/RunOnce/configuration.json
  • dcrat/plugins/RunOnce/fav.png
    .png
  • dcrat/plugins/SimpleProcessWatchdog.plg
  • dcrat/plugins/SimpleProcessWatchdog/SimpleProcessWatchdog.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/SimpleProcessWatchdog/configuration.json
  • dcrat/plugins/SimpleProcessWatchdog/fav.png
    .png
  • dcrat/plugins/SystemInformation_native.plg
  • dcrat/plugins/SystemInformation_native/SystemInformation_native.dclib
  • dcrat/plugins/SystemInformation_native/configuration.json
  • dcrat/plugins/SystemInformation_native/fav.png
    .png
  • dcrat/plugins/SystemRestorePointsCleaner.plg
  • dcrat/plugins/SystemRestorePointsCleaner/SystemRestorePointsCleaner.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/SystemRestorePointsCleaner/configuration.json
  • dcrat/plugins/SystemRestorePointsCleaner/fav.png
    .png
  • dcrat/plugins/TelegramNotifier.plg
  • dcrat/plugins/TelegramNotifier/TelegramNotifier.dclib
  • dcrat/plugins/TelegramNotifier/TelegramNotifierConfig.json
  • dcrat/plugins/TelegramNotifier/configuration.json
  • dcrat/plugins/TelegramNotifier/fav.png
    .png
  • dcrat/plugins/TestDCLIB.plg
  • dcrat/plugins/TestDCLIB/configuration.json
  • dcrat/plugins/TestDCLIB/fav.png
    .png
  • dcrat/plugins/TestDCLIB/file.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/TestDefault.plg
  • dcrat/plugins/TestDefault/configuration.json
  • dcrat/plugins/TestDefault/fav.png
    .png
  • dcrat/plugins/TestDefault/file.vbs
  • dcrat/plugins/USBSpread.plg
  • dcrat/plugins/USBSpread/USBSpread.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/USBSpread/configuration.json
  • dcrat/plugins/USBSpread/fav.png
    .png
  • dcrat/plugins/UserPingCounter.plg
  • dcrat/plugins/UserPingCounter/UserPingCounter.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/UserPingCounter/configuration.json
  • dcrat/plugins/UserPingCounter/fav.png
    .png
  • dcrat/plugins/VPNGrabber.plg
  • dcrat/plugins/VPNGrabber/VPNGrabber.dclib
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • dcrat/plugins/VPNGrabber/configuration.json
  • dcrat/plugins/VPNGrabber/fav.png
    .png
  • dcrat/plugins/WebcamViewer_native.plg
  • dcrat/plugins/WebcamViewer_native/WebcamViewer_native.dclib
  • dcrat/plugins/WebcamViewer_native/configuration.json
  • dcrat/plugins/WebcamViewer_native/fav.png
    .png
  • dcrat/plugins/WindowsDefenderExcluder.plg
  • dcrat/plugins/WindowsDefenderExcluder/WindowsDefenderExcluder.dclib
  • dcrat/plugins/WindowsDefenderExcluder/WindowsDefenderExcluderConfig.json
  • dcrat/plugins/WindowsDefenderExcluder/configuration.json
  • dcrat/plugins/WindowsDefenderExcluder/fav.png
    .png
  • dcrat/plugins/chat_native.plg
  • dcrat/plugins/chat_native/chat_native.dclib
  • dcrat/plugins/chat_native/configuration.json
  • dcrat/plugins/chat_native/fav.png
    .png
  • dcrat/server/getblob.php
  • dcrat/server/vZGOpKmEUkU7BDMvGUZ97QNikJvrOmXSGsjWZ8g0kbT4Nv.php