Overview

overview

10

Static

static

10

Providerho...ed.exe

windows10-2004-x64

10

Providerho...ed.exe

windows10-ltsc_2021-x64

10

Providerho...ed.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Providerhost_Slayed.exe

  • Size

    5.8MB

  • MD5

    263d0b6713e330af2c42a39ff1418807

  • SHA1

    ee6132238748ec57cd8e8d6c0521570be1866149

  • SHA256

    7ffaa6141811c066f72560675b8df9ca32e8a28431489e9fe9dd479c1004fa59

  • SHA512

    66a5b7d6bcc4426c6f188c8d1312d5257a62fd0b098dcc5fa72e1e8cf1d7f5be3e0263ec2faefefa97228ef634228968db22dd8e1dfe1f0a70a6d4bf7d26521d

  • SSDEEP

    98304:JP7kzuZ1cBGWwT/gIM7aNcYkJ+lTEYHerN79G9yhPH:JzdcBVWC7gc0lrHerfG9QP

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs
    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Providerhost_Slayed.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections