General

  • Target

    xray.exe

  • Size

    2.4MB

  • MD5

    3f495c137764c7d60d2131a1bbe88c44

  • SHA1

    b5d968c1992254a6b6040b8767a761923d2a1412

  • SHA256

    537fbbc4a6f0c7f271d067572feeffeaa4b7e25ba0fd3905e99204048ee56204

  • SHA512

    d8a3c2f520e21e86a45fb55866ce5986cd91e64b577f94e8b918fe0975983cba2fabc18e9fa0090785c6f1d6ab2bd6e854dc4ec224a87e85fed8f7341b8652fa

  • SSDEEP

    49152:UbA302woA6fcrVZX9sOjCwyyXoHnIZq+JZ3M/b:UbLEfcGOjvyyXIMBnwb

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xray.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections