General
-
Target
585d78b9ffc988d345e7a2a0ee119111.exe
-
Size
23.9MB
-
MD5
585d78b9ffc988d345e7a2a0ee119111
-
SHA1
65b5c6a6c72a845d5610d82ca2aa9a301a907e43
-
SHA256
82ae530eb29e0c64986dbd019f86cac5eff3daf3c1fb861757a60252eb1e4661
-
SHA512
574c1f9ecaaeee0cc7afb989e3c3d309beedf3b114fbbb0aa491a285d94e27b4e87626a109805d06edcace458441189cc2dbcd17588c670ce8788c9e8e3a9772
-
SSDEEP
393216:849/fUrtpuKs+JINSpjQNjqsVsUzpX/Swl6YdecNbLX3IjD4BzB/RLG0jV7ZIfue:cBZs+JIgpjQosVRlKwlOq/X2EtF9IGe
Score
10/10
Malware Config
Signatures
-
DCRat payload 1 IoCs
Detects payload of DCRat, commonly dropped by NSIS installers.
-
Dcrat family
-
Detect ZGRat V1 1 IoCs
-
Zgrat family
-
.NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
585d78b9ffc988d345e7a2a0ee119111.exe
Headers
Sections