Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Estynett start.exe

windows7-x64

10

Estynett start.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Estynett start.bat

  • Size

    1.4MB

  • MD5

    401d6a0e3eeb52ba552aa2b8586df60f

  • SHA1

    256abb3298479ce5b77ef443869e372f8df2b8e0

  • SHA256

    08451edb5b692cedf6cbb2b41d532f375707d69b8670054b95f973782705db25

  • SHA512

    f2518203a3a51080befbba6e92422cd2d8d471a685f1393be8e920d24767acf2c27871d9a508f7249abfa367c530492500f336a8f430764819260c536f699fd3

  • SSDEEP

    24576:U2G/nvxW3Ww0tphBpEOYFciGLT5KIM+K1BVRSO6lGd4LmujFS9jF8:UbA30phXEtcKp+mVRxMGd+HjwQ

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Estynett start.bat
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections