Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Korium.exe

  • Size

    3.7MB

  • MD5

    7d659a467c75c26bcf8adcfcdef946c2

  • SHA1

    5b435ea1a4cb048530d40b890680233d1cc61b14

  • SHA256

    7faf36672422e3b53c7f7ec951deeaf1b7696bf929b502037e522655d509bb54

  • SHA512

    f7185471867e19ca6e5fa8fea8610dc4ef543321ea5b119a06298320c595b4c8be60a9d26b9814c359c3f957fdc41772844e5cdf6914355d75334ad2e99e54ad

  • SSDEEP

    98304:+bgfqHdnBJDkYBX/5LUivpKuoAqcQx2KL9L:+MUxDNr5shcY2a9L

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Korium.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections