General

  • Target

    DCRat123.exe

  • Size

    3.3MB

  • MD5

    b2a2388bbea583bd775ffa60ad137c8d

  • SHA1

    b7a649c73defd43695218a1c6e67d0184311e869

  • SHA256

    d6988ffe9f646f959400d60e700e617493ef83e1f32dd8d7b85e5c1790d8bc6c

  • SHA512

    12fb0b5d32494e094d78bb5c930c317898ae9fc4ac99c73bb2bd0749a3e755d4e32bfcc6842b5c85d23d5ccf8d2750e64b5b6e63a5140a722c7a3ba79c42a125

  • SSDEEP

    49152:UbA30kIL9erMYbvYZgn9U0qGmaEY9zvHPH+LhnTJLyYg/Hv9QfokM9JaQplqh:UbPUrMMign9UhG6YeLhnYYg/tkOpfk

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DCRat123.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections