Managed XDR

c-windows-ga7yh3y.exe (DCRat) — malware analysis report

File info

Filename
c-windows-ga7yh3y.exe
File type
PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size
2.3 MB
First seen
Last seen

Environment

w10/x64 en

Hashes

SHA1
ffa1ea21761d901808ee9105b2a9834ea74f44b6
SHA256
5b8f199ed468d8f1503975fe6f545c8ae909074359fe837aa8952ad748cfd17e
MD5
1a9ac4e033a9d5ec017aceed18d19d47

Malwares

  • DCRat

Signatures

Other

yara_rules: Static rules
dotnet_suspicious_module_name: Dotnet program has suspicious module name
dotnet_import_unmanaged_code: Dotnet program statically imports unmanaged functions/modules
suspicious_network_port: Performs TCP or UDP request to non-standard port
dotnet_suspicious_entrypoint: Dotnet program has suspicious entrypoint
dotnet_downloader_possible_network_problem: Dotnet program possibly has network problem

Related reports

Managed XDR