General

  • Target

    DCRatBuild.msi

  • Size

    2.3MB

  • MD5

    2a32c66883480a7eaa5c6cb0d101e7fe

  • SHA1

    e3edeb95d7722fb3f4a1455e0ef1f459fa271557

  • SHA256

    a0108a92c24b0679927c98ab367515578ed1c365592d5659ca5ca5239ec052d1

  • SHA512

    1e2869217fcbfe038c660210dac48e1d7833bfc30428b052b1a2be8606a3c4c71be230cf31322cf8c177d959ee05718d04a7eaf14540fec7226b351f1e017a68

  • SSDEEP

    49152:ubA3jP6EikWZzlUTyXsoB+5Px6BfzU/63wB:ubVIIlCesciPx6+/63W

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DCRatBuild.msi
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections