Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    qlane.exe

  • Size

    3.7MB

  • MD5

    d1774422ee46d3f99130be023e7fdde5

  • SHA1

    8f394a06da16e2ac9145c825cca17d81003422f8

  • SHA256

    4749bd8e71b4e8b83e407164839d5ffdb4f0503c7489b25c23850d93cef1b21b

  • SHA512

    6f78cb5c328e1a1919c722bbd08333535c4fbf0fb4ff5d99c361e79c35acd6889e3bc340ac23bcaab7d07d12ba7c2be8c232b4dd102542a62028a8d1f2af2c56

  • SSDEEP

    49152:ubA3jQZJ0ZLil7XV9gxC60T3vOndKOg7zUjgo53wLE87tobZvS4mouQKRFJ9XHna:ubXJieRExAT3mC7o54EUodSSKRBSZ

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • qlane.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections