Overview

overview

10

Static

static

10

Remover.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Remover.exe

  • Size

    2.6MB

  • MD5

    f83605a5c0874e1959a693ce90a458dc

  • SHA1

    8fa1830aba9a8a65530e176aa562676553c72cbb

  • SHA256

    603034b6ead322c7d7c3677ad9a9278187531d2f0f277443332ed7431e2fd6ac

  • SHA512

    e1840802b779dbbbd6ea0009e49625175eec8f2eb7a29e8a1904c3ba2ad5cc209c0bd59415a0b8733e08626a51bc5bbbf912466632a8727f1af3ae8fbd555893

  • SSDEEP

    49152:ubA3jB3bqnGgsbceHcF3kKrZbKorPNXWl5xtFCPSnfcK8zP9MUWGj74:ubq3buNsbGF3nrZbDzlO1sqP88Gn4

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Remover.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections