Overview

overview

10

Static

static

10

RastyClient.exe

windows7-x64

10

RastyClient.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    RastyClient.exe

  • Size

    1.6MB

  • MD5

    e97033f786a03e53c5b1f2f8f7459823

  • SHA1

    ee716af387f986b3f89eaa8f95e2e9525a7e6dc5

  • SHA256

    51803275cce1aa6e37aaa3f5cc9d28244eb27f275691254b0c916224f8cbe3f3

  • SHA512

    492f847961f8bea60b2aaa9d6200148fb0b7da4a504f3bd41c624e6698d8ae5f0ac925c612cc53b099173ca1730c8c1bd6945ca8ea58d1a472fc428220c5e8ca

  • SSDEEP

    24576:U2G/nvxW3Ww0tXNKse+i4rH9o95ONppeDZf/7wL6yz3dkoJoDvCJp88aQ:UbA30Xg4rdC/bIoDvC88P

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RastyClient.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections