General

  • Target

    DCRatBuild.exe

  • Size

    1.8MB

  • MD5

    8a86961ca6303365914f66795186b8e5

  • SHA1

    bb0cfa6a82f4f9504de976fb9bdde38dd5145c75

  • SHA256

    64c89392abbf731cf1c3562548c79819a043b71ae9b0bedc4fa68a1b673a9a88

  • SHA512

    eb0331ad68c7db5abcb5378b60855c7f40b76ba8fa1df1aab03924d79df35cab600262c64df00c64253c5f255aa514e841caa8e3b49be8f251d35569786ccc56

  • SSDEEP

    24576:U2G/nvxW3Ww0ttlF5vfXNfjw2WWAJhuRCLwtm3PWdxdMF57cHsBuj8rnblCdXtvw:UbA30LF5F0FJcOUxSFCHsBujslC5tv4r

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DCRatBuild.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections