Rainbow Dash RAT[.]exe

General

Target
Rainbow Dash RAT.exe
Size 5.3MB
Sample260919-nn32eaeg56
SHA256 f6a048754437986a1a79f0f88829e3f52d66d2b9b53f8fd288141df6cc0d1b43
MD5 ad83d8d88abfaae4c800f796b2d52fae
SHA1 80c0edb1d47b737cfb4ede6ab9881e8bc14251cb
SHA512 ee11dc1eec7219597dd03acd9672fd44b56def970e6d0f56fbb0c36d2a6f06becff74e3eb9fdbf6788c5f0ea63da281fc20399939e829b6a7ad9b730d188d27f
SSDEEP 98304:321XK65Rn80+kNgoTTtLP9Pk6gAK6n4ldyNhYHc2pDsQnqywPz2K:321Z5RnPNg+L1kehn4ivqD1qy
TLSH
T128466A1373A1E429CA3806F129519FD152B66F1E4D308AFA398C67BD2FF26C4B5947C2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Rainbow Dash RAT.exe

File Explorer

Rainbow Dash RAT.exe

.exe 5.3MB

Rainbow Dash RAT.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f6a048754437986a1a79f0f88829e3f52d66d2b9b53f8fd288141df6cc0d1b43
MD5 ad83d8d88abfaae4c800f796b2d52fae
SHA1 80c0edb1d47b737cfb4ede6ab9881e8bc14251cb
SHA512 ee11dc1eec7219597dd03acd9672fd44b56def970e6d0f56fbb0c36d2a6f06becff74e3eb9fdbf6788c5f0ea63da281fc20399939e829b6a7ad9b730d188d27f
SSDEEP 98304:321XK65Rn80+kNgoTTtLP9Pk6gAK6n4ldyNhYHc2pDsQnqywPz2K:321Z5RnPNg+L1kehn4ivqD1qy
TLSH
T128466A1373A1E429CA3806F129519FD152B66F1E4D308AFA398C67BD2FF26C4B5947C2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5446998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Rainbow Dash RAT.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Rainbow Dash RAT.exe

mscoree

dotnet