General

  • Target

    0c64d0ae05035b5b5b33eb58505ea1fe.bin

  • Size

    2.2MB

  • MD5

    05ef46068f07ec0b2462af8ed8265894

  • SHA1

    61d80f71a6be29db1d87ea712cd563dad91ec6cc

  • SHA256

    62635379f4d2479556a9ff9b5447e8210c18f23fce2604e09bcfb1a95ecb65f3

  • SHA512

    4daea0864defdc682c05b7d2ad3fc98b8f70f182dd2921b7701deb9b713cc5627b6aaa2c2f95f0aee6691f92a99b4047fcb0b4fff9fb6b243cbf0a6bacbf14bc

  • SSDEEP

    49152:fpuEiBY6RctESP/9iM0HWSd0YPdQZ/5zYPzY44JJRFw1Wnc+X5:fkBBY6+6S9ulxde/5zYP84wJRQqc25

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c64d0ae05035b5b5b33eb58505ea1fe.bin
    .zip

    Password: infected

  • 7a08a316d3f4dfe0320da290747f85ea1047329f8de03e95e02980a5dbf95648.exe
    .exe windows x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections