Overview

overview

10

Static

static

10

49fac6f7cd...fd.exe

windows7-x64

10

49fac6f7cd...fd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    49fac6f7cde42f725c4ded8eaec8defd.exe

  • Size

    827KB

  • MD5

    49fac6f7cde42f725c4ded8eaec8defd

  • SHA1

    1da1528c1328b1f760d37ec5739e318556c6a149

  • SHA256

    8b5e8cd71fe65a7626a83a9caa043ece63ebf3fedb46f88bb4b2c370604d58be

  • SHA512

    43edfbdc083d01e93fd512c7b64e721469103efb98f266a2a705ff3ca02085e86139b56e97c2e3c2bb7edb305f18399f0146be51474970a740bb19698044bac9

  • SSDEEP

    12288:qA8qqgLB4ZmSBBYSU3FHwh9mtdSaDnPIIP7cOtup/Rn:xLBy3BBGdwhAS1gQIup/N

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 49fac6f7cde42f725c4ded8eaec8defd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections