Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    RunTimeBroker.exe

  • Size

    3.1MB

  • MD5

    56ea7e7d7927672573a80c089cb61e74

  • SHA1

    0727f712bf11723a84d1d4a5031e02443633bedf

  • SHA256

    919c278f7174de616eb625a4c3ea7ce224b3816545b2909b4a56fa0dcfca6a5e

  • SHA512

    b4874ffe3e59fd2fe5da02507c146e8cb9c3f849f0d0dea65b6b572ac7d6a816a67d6bdbcb025ce3feac7eb2be57a9a852772455a81a5caa7ef60dab6bf96a39

  • SSDEEP

    98304:w5ZujT4Vu0xDtJ1cFu2QbGXQKHqmikLna:yiJ0HcjKia

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RunTimeBroker.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections