General

  • Target

    mapper.exe

  • Size

    1.5MB

  • MD5

    13a435d0628283d7ad8030aea653eec5

  • SHA1

    f5ab860cd0ae67fb689ebc65a1fbefff3c359fdc

  • SHA256

    2600e8012c4b85e0d5d98fa0f4a113f20209ba11f14ef83e65053b298fd4b177

  • SHA512

    24165cc2c0c6f2af95145d97ed650250e7323c733d99dfcd54075f1ee76e806e5941c3a6276a276358c3ea5fd51003387091537fb0e95cd69d25777ebaf8fe22

  • SSDEEP

    24576:b2G/nvxW3WyXqbJoaKO4OV1dflflAA/KFQGAV/C3MTHhuWGC:bbA35yWO4OVlfDKyGAV/OmuWR

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • mapper.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections