Overview

overview

10

Static

static

10

8b9947e2e2...d3.exe

windows7-x64

10

8b9947e2e2...d3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    aee468e54b24ede573047e4b78fe3460.bin

  • Size

    472KB

  • MD5

    5dcfe25580f976829bb82cb5aa4f1b53

  • SHA1

    4639c433c9cfae6d3849454a05545640aff331ba

  • SHA256

    bbc3727f2ce0d40a6546142888a536b63888922f0386704d619cb4c8bc4b5cfc

  • SHA512

    9e45b9202b3f4552462e8d9782ac4fbe0cfb124d19a212d9269fc585f5d1c89373d426cf2043539c43c4ed4dd189a5bcb28486b4219a379f7f238c22e79d7e19

  • SSDEEP

    12288:wiFyg8VW4jYLDphM8mef4vu07v92yXTnOywTqA/LAuz:wwyNfYLwdU0bUWimA/LAuz

Score
10/10
ratdcratneshta

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Detect Neshta payload 1 IoCs
  • Neshta family
    neshta

Files

  • aee468e54b24ede573047e4b78fe3460.bin
    .zip

    Password: infected

  • 8b9947e2e2e1c372c0f87fa55f23dcb22d4fcacc706acd7ee019f43cbd4badd3.exe
    .exe windows x86

    Password: infected


    Headers

    Sections