General

  • Target

    hz.exe

  • Size

    2.0MB

  • MD5

    4173ef9548c08b66a0b4b841ab91f475

  • SHA1

    0054d308b9729cc7af0f8287b2786bc4246966c5

  • SHA256

    5a3484f0aedd1a84750a5a3debf21a0f28efd20323ab55a0c89f622c27ebf9ad

  • SHA512

    594c4b09fe60a3ebd4614f25632b720ecfe98ce6ae4476d81ab76f9ea8234cf3fc1b8ceae880646c2652e18983d7d9021cbc121f6da8f68edb74d9c0828cd3f3

  • SSDEEP

    49152:UbA308AYvrxX9mR+5YEGXFhDRf9Q9mduSnp8zTu:UbxYvZ9mvXrRfmkduVTu

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • hz.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections