General

  • Target

    OxygenU.exe

  • Size

    11.0MB

  • MD5

    4818e005a18f352d231c4b81303b64e4

  • SHA1

    df3bb09f6fda919285c099b61020f73ec9a55b66

  • SHA256

    713747919a6521774dabbc5b9317f6e4b5b047445d71059b7025c4444d006c31

  • SHA512

    a9b01a6e434b4e70a76c3dc225660e0947a83b2cd7b96ed735cec56f838fbc6533d10e07c5487547852dd706f4f581ed4a2329168cb49ef2e773fede3d83ff18

  • SSDEEP

    196608:+8h2zGoGdN3W67/maKQie5TF1DO/M3Hb6lTKVRn/Fw+RAxLNCk8/OICk81kSIhWj:/gW7/maUeE/+HwTKrn/Fw4ZyZ1kSa4

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • OxygenU.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections