Overview

overview

10

Static

static

10

svhost.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    svhost.exe

  • Size

    3.1MB

  • MD5

    0576f3975ecddbe6f36c7193c550220a

  • SHA1

    b4d5fc9c7909de32af181bd9cafb0820b076b790

  • SHA256

    780ca35ebb46afcdf59c486a37810a3642351bacbbea241d770330a6d3a92249

  • SHA512

    40b2fe904756c9bda180c9812caa4d8e1b7e980a865aac636af0cd923e5d9aacad82a7e033fef6893877abf80dcc5bed32bfd1a79913d26c7e8357dd70800836

  • SSDEEP

    49152:ubA3jHf0AsSwuoLyIPINgqdqZtUac//CxLasJ1ENYN7RG/2rP7Cr4AwurD:ubSsS5wQCvLURCVJ12M2YI4Dun

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svhost.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections