Managed XDR

vtdl_1781721744_cxhuq96i (DCRat) — malware analysis report

File info

Filename
vtdl_1781721744_cxhuq96i
File type
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size
1.1 MB
First seen
Last seen

Environment

w10/x64 en

Hashes

SHA1
24bc6478670ba0f7f71808b36ccb30be45a22fb7
SHA256
0059f6734561ac0349d6ea89964b65624323410c07f11991605d4d6623734a5a
MD5
53bf5f5533f44d84a079b9168430275f

Malwares

  • DCRat

Signatures

Other

yara_rules: Static rules
dotnet_suspicious_module_name: Dotnet program has suspicious module name
dotnet_import_unmanaged_code: Dotnet program statically imports unmanaged functions/modules
suspicious_network_port: Performs TCP or UDP request to non-standard port
dotnet_suspicious_entrypoint: Dotnet program has suspicious entrypoint
dotnet_downloader_possible_network_problem: Dotnet program possibly has network problem

Related reports

Managed XDR