General

  • Target

    Wave_RBLX.exe

  • Size

    2.0MB

  • MD5

    367d2a70e3ebe1527165b5a01ec0aa07

  • SHA1

    7d4ea20cdcd9d9377b73b8fa1b42c9af69ebdc5b

  • SHA256

    4de8450e1aef1c7e8c70b7e9c09fd2b87d6ca3f2d8f2989dea90e5fb7f77b43b

  • SHA512

    d851f30147e8b7cc794661a51f0a7c4e8d4c0af4bdb96ef429877af5bd86ae18a2a9de7215e6fc151c29374d3b0ad8d4e003f63fce953a7b185b48ac232356b3

  • SSDEEP

    49152:ubA3jL0T08bIdLGsDQJlDU8AOuhclDMjWTR:ubBT08AsJX0EAo

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Wave_RBLX.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections