General

  • Target

    DR.exe

  • Size

    3.1MB

  • MD5

    b55d6d31fef8a37dd2e1d336846e3d16

  • SHA1

    4f2827e15a44be3c0c4ea8794d3036975982a8b4

  • SHA256

    e783576484b60a6d1c5302f2b8694b0268efbbdca7543cda661f7705b5434639

  • SHA512

    558f20c30e776e6681ea8bf7f1ee7c84628b3b20606ced9ef3e32fe84f2e08c799413ea108069be955ddd4d06eea0fa9317bfd2cd34babe7da79584a12220ff1

  • SSDEEP

    49152:UbA300ioWsK3TgNUQhrYsXpfsfiXNaDKX9mnAl57gD1RxHJWFVvCFpGBGIq:UbBoPwIBYqufoNhX9mnAl8lAFVvRpq

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DR.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections