General

  • Target

    xlib86.exe

  • Size

    624KB

  • MD5

    15d1f00d56be9a75ef838df7296fd36e

  • SHA1

    eaecc49bebee74cd142af04ba5047acfc1c10db2

  • SHA256

    0295fc7acaed48393649e69a4a604a682afd9fa832d6c69ba5a0ed6f15471fe4

  • SHA512

    9f61f4350ef961b9ef29930f9fcfca0b756cb8fe1b48707b6be591cdfd71f1347996566bfb89cdb543ee39d2ad899019a7638429f340f6351d5043258933e437

  • SSDEEP

    12288:URZ+IoG/n9IQxW3OBseUUT+tcYbga2N7O+WJu/Z9kBTdxFZA:u2G/nvxW3WieCga2LGMkLxFi

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • xlib86.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections