General

  • Target

    RicardoClient.exe

  • Size

    1.6MB

  • MD5

    d7a095cc4da40d03986d8df3a45b00dd

  • SHA1

    d86ded230412a6a643ab8a9f3f0e9554621cdd51

  • SHA256

    5ee87bfc6103de57b7e542a4e8a43f67e3b3f6aff95b4148729631f706869301

  • SHA512

    d7500e3c6348373e3b381afb0275baf170a88af11b096619ed7cf425a25c49e4e13ccbc0d2376da53214786f2415bd3c577327f5f3c86b6100b8ea4ae707521f

  • SSDEEP

    24576:u2G/nvxW3WieCnXCdxofNB/iCOiiRBXT619Q5ozmByfWROl:ubA3jnXCofS2ECYMf0k

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RicardoClient.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections