General
-
Target
DoomRat.exe
-
Size
12.1MB
-
MD5
b6f21ecc31778ba2362958d1e5091759
-
SHA1
613dbf4e682fe14b8617908113fc5c7ba05de16a
-
SHA256
94bd1fa65b9ee3fe4be830326ebcd918609ee260797391d1af8aa4ac470cce3f
-
SHA512
d5d842d520fa1a5a768b62e3d4945f7aa49aa3079c78843cc70eb2e87515dc228cd8bda2ecbe70d1cdb8a94630687cefe587ee6dfac93685cd9e17473040ac4d
-
SSDEEP
393216:HGV2CSQhZ2YsHFUK2Jn1+TtIiFQS2NXNsI8VbTToP:KYQZ2YwUlJn1QtIm28IKzo
Score
10/10
Malware Config
Signatures
-
DoomRatV2 1 IoCs
DoomRat is malware that downloads rats from the tria.ge API.
-
Doomrat family
-
Detects Pyinstaller 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
DoomRat.exe
ba2fe82dbe3fc8bdddc26ef88c3ef15a
Headers
Imports
Sections
-
Dispam.pyc