General

  • Target

    Driver MSCUI.Mo8h5NTU.exe.part

  • Size

    7.9MB

  • MD5

    617e936cf5710b01cce89d6de518c1cb

  • SHA1

    32b9e743bde19759f8a5b68649be4692eba7cb12

  • SHA256

    8f45af8d4e3e09c3154db52fb3b5127ee771a9818e9afe8d021fa24f2dae8a9c

  • SHA512

    d8d8231bdac4072b6c3636079be8d655622a96ee11fea8a54748c8f96a5f54721308e026158f15afe6e61aeec3299ace6071d85db246d7a1f99bad3d77705c1e

  • SSDEEP

    196608:+nzgOzn049XJA+1htxalMQ0YZeFZzx736b:+nfzn049u8GlHZeHzxeb

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Driver MSCUI.Mo8h5NTU.exe.part
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections