General

  • Target

    Realtek HD Audio Universal Service.exe

  • Size

    2.5MB

  • MD5

    3389fc2b0cbe478b8ff249b7fedc75ed

  • SHA1

    949a474ba3ad5913504b999516e0e7aac6d1854c

  • SHA256

    7e4efd43ace17028eacb97352fe2ea46d44b96aca3068130b0cdec4dbba081b1

  • SHA512

    707f7bcf0d86212654d1f69f2dd8e753dc8a67a1bc9d5a5132e60c852ba6d4b30063656e0e6f87104ec7825404add94e8bfff5ec1757df7add4c1b604cd30313

  • SSDEEP

    49152:ubA3jiVzPs0EdtihQywJd5+wtY7YXNxR7a/dCo1vD3IUP:ubJzREdt5D5MInOdlN

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Realtek HD Audio Universal Service.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections