General

  • Target

    BuildR.exe

  • Size

    1.2MB

  • MD5

    6386c6bc5c2e9e6ea345b370f67868b6

  • SHA1

    534e13f301e9816d6df34ac36d31bfc1b03c1a39

  • SHA256

    d5ac904ea7afae96375fecfe74458e4aaa46f375edb12b950b23825e2ded11ae

  • SHA512

    85004597a30f91b42b857e66d2a186c0b359a884981f3ace452e270f618776233d2ed489e66b06aa8e6c0f25dedc76c827480c2bcb608bf6b17408c7d62712dd

  • SSDEEP

    24576:/2G/nvxW3WxE37uuHjiOZmd3Oq+PaEzSJUmgvPgyGGsOfCGHsIIm:/bA3HLffCG7rs4Hsg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BuildR.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections