Overview

overview

10

Static

static

10

RakBot.exe

windows7-x64

10

RakBot.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    RakBot1.rar

  • Size

    1.0MB

  • MD5

    f96a01102ae6f777fb4f56504b7f2d8c

  • SHA1

    19469f8ef0030c50aa6c596dd5a2cac44c0abb47

  • SHA256

    bdd9a3dac356f98dac4c3d663cde81550fd6c5ba5b8a65f9db902cf11ce4a9f8

  • SHA512

    64899bcd7b8dfd17c8a6daa172c99876c3afc1d03d671abbbe5f310aa95c8bd3f0cc90f7433fced96dd31fbdbe5f8144df392937a20f17bf012ab66e6822cf3c

  • SSDEEP

    24576:IRf7o2gjI7NEdnHxKq1bWyYvmrb0l91bq1YabeA5GZfZiDNh0nf:IV7o20c8M8bVEl91StbeOGZfZiDNef

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RakBot1.rar
    .rar

    Password: infected

  • RakBot.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Sections