General

  • Target

    DoomRat.exe

  • Size

    12.1MB

  • MD5

    0cf5c5253e621e56587ead9ccf6fc23c

  • SHA1

    0f3d67f82bf309ac7ac3df68a78be948c12a0cad

  • SHA256

    2c6b6b7588405b536d24bad92d809fc1a71c389c93154b3571463dd0d8774404

  • SHA512

    6fcf003361c4e53eea1ff32304ad765e76d92e613d94515008e3dc291008fcd76809008f1436dbe202bbebf762286551b001e534c6626ba0dc9062758a0c8ed9

  • SSDEEP

    393216:tGV2CSQhZ2YsHFUK2Jn1+TtIiFQS2NXNsI8VbTToP:0YQZ2YwUlJn1QtIm28IKzo

Score
666/10

Malware Config

Signatures

  • DoomRat 1 IoCs

    DoomRat is malware that downloads rats from the tria.ge API.

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DoomRat.exe
    .exe windows:6 windows x64 arch:x64

    ba2fe82dbe3fc8bdddc26ef88c3ef15a


    Headers

    Imports

    Sections

  • Dispam.pyc