General

  • Target

    tmp

  • Size

    1.3MB

  • MD5

    cf89d9b7de3c298b980138d2966af8f2

  • SHA1

    993f970437ca997455122eb638edcce52fd6785a

  • SHA256

    f466d39a4302e04f41f7b0b7c64f5e443c72f4725c5521f1e7825465442d8900

  • SHA512

    6cdfd4813a39ec9310e6356d920a261b4e29332f0d2a7e090b6fca4ba14692491fe12e6ab9a546b91a30e8b55628b75ab4a21c8815d3a1c7bae108c63025a250

  • SSDEEP

    24576:u2G/nvxW3WieCEoN4WsXJSxrcBfO/HknM5hjQ6Af:ubA3jleeoukM5yvf

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tmp
    .exe windows x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections