General
-
Target
blockcomponentbroker.exe
-
Size
315KB
-
MD5
54a9243a4fb9ac14e2b20d9e572d92ca
-
SHA1
a9a04900fcdb00eaeb1ddb785052416fe098f8d3
-
SHA256
c2bd0a38a4cb588ce6810b40e587b0bc019d1806e963ead76a27e13de707787e
-
SHA512
cdcb15c7b4a20149fb42ef58afe69267542c68cc514d386479952c5e7061b78a8c8d366ea66f64adf914e6b59bd899f3424dc81a086b694165d6f449ec771aac
-
SSDEEP
6144:Nhky2oo7KkpZv/gsOPOw891ZdjkxLv+vFRLH4qUdx7bvr9u:NT2N71jQsOwZdbLYXdxfZ
Score
10/10
Malware Config
Signatures
-
DCRat payload 1 IoCs
Detects payload of DCRat, commonly dropped by NSIS installers.
-
Dcrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
blockcomponentbroker.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections