General

  • Target

    kirrstar.exe

  • Size

    1.9MB

  • MD5

    782545ebb1627aafbdd1f71cc52e50c7

  • SHA1

    b1d27c1e03fe974d50137057951d1777439cc613

  • SHA256

    e810c9445e775019ee32d4a0d4aba7315a5e44527e854a444ad7f072c7dd891f

  • SHA512

    9083e247eebc90392c4a2b9e4b10a9c81eec85dc9a13c3f9b539918c7225d730f8dc470769ccdeb2bdf139ff68f6c640f7d2a1cd3bf1396236de80b5af7bf07c

  • SSDEEP

    49152:HbA3FaX7C/8hUYjLY7rtMfDYj8Fun8rxe0SdqY:HbbX7C0E+Yjg9xnyv

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • kirrstar.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections