SID 1:64371

Report a false positive

Rule Category

MALWARE-OTHER --

Alert Message

MALWARE-OTHER Win.Trojan.DcRat variant download attempt

Rule Explanation

This rule looks for bytes unique to the file.

What To Look For

This rule alerts on an attempt to download a variant of the DcRat malware.

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group

Rule Groups

No rule groups

CVE

None

Additional Links

www.virustotal.com/gui/file/dc2ffbc7481a2b7ed0579fae72bb092bf2a453608fb7d520288a1ea8a1557d48

Rule Vulnerability

No information provided

CVE Additional Information

This product uses data from the NVD API but is not endorsed or certified by the NVD.

None