dcrat | Neles Skinchanger 0[.]28[.]4[.]exe

General

Target

Neles Skinchanger 0.28.4.exe
Size

5.6MB
MD5

a13bcc8067d988bdf67c04cbd394213a
SHA1

d32d82f56b632f74381caff663a363e5f30e22f7
SHA256

3b6c50997c6575d2c7a3300b6afaf16b2440874c0540ee415b842d649d104f44
SHA512

b49f9f27f5b1b9e505d13777477f7d05e42b2455ee336e2d2aba0e595cb600f1de7da5a18a78acbd28a4512fe63faa539b960a4f7977f2bc5b32a06637bb17e8
SSDEEP

98304:jNXGluIWpVgaDIz6Sjozu+bk1Ct6hvCzWlcdiuN4bupuwJ2PuGnXhzVb+yl:jNXGlNF6irKu3C+vQWls48anXVVKI

Score

10^/10

rat dcrat zgrat

DCRat payload 1 IoCs

Detects payload of DCRat, commonly dropped by NSIS installers.

resource	yara_rule
sample	dcrat

Detect ZGRat V1 1 IoCs

resource	yara_rule
sample	family_zgrat_v1

.NET Reactor proctector 1 IoCs

Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

resource	yara_rule
sample	net_reactor

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Neles Skinchanger 0.28.4.exe