General

  • Target

    agenthostcommon.exe

  • Size

    1.2MB

  • MD5

    0e7963961186fa0563efbb7e2312034d

  • SHA1

    966dd343e1a5760aa2d4b27f5e920bc1d0e53430

  • SHA256

    b6d9acc3a43dd4897b59998c426db1af0d59f4b86b7a27d923adf32b2d643b65

  • SHA512

    816050bf913c0c431a03e85a578e7aae6a4e1030d179d4501c732bc04c238d9133c8cd7d60db52610adc71f11cee67c5124a944e521cee58ace1bd9760a50236

  • SSDEEP

    24576:TsabRr96PUyifNzW657ZcGUOXTjieEVFpZ9867SgxeU1nS9x8ANI7y5:DR0U5xgOFsbP7Bxe0S74y

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • agenthostcommon.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections