Overview

overview

10

Static

static

10

Dox_tool.exe

windows7-x64

10

Dox_tool.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Dox_tool.exe

  • Size

    1.7MB

  • MD5

    276b2bfee53d4a1bd9b6ea4d2f1b7dda

  • SHA1

    675296357dee37115c193e31fac2de25964f5270

  • SHA256

    d9f6c68201892bafc05114797bcfe7d38d14e0d33604fa2b987cd9fb10b0606f

  • SHA512

    58f68ce2fa13fd24bc9d93439560d55fc1121eb2ed949f4b9cbcf6aaaf9363ed55803f1a3714c1a171c2b9c7311aae23867624ea8e0987f3108f0a14199324c3

  • SSDEEP

    24576:U2G/nvxW3Ww0tlRnL691WiZw7xxf2sOQY6/8YHz4m5LG+sn501TW4l/KXFUO9RZQ:UbA30lBL6e7Xjc4euy4l/KXFU6Ih9

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Dox_tool.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections