General

  • Target

    6c8c36b4cadb09dbdf863c1a4109c99a.bin

  • Size

    737KB

  • MD5

    580846a9187ed9d6c103283f50241d3e

  • SHA1

    b8856d7a27cb373bc0993324b5ea9c57cc1e5e57

  • SHA256

    57e63615fe23beb799b5466782b2f3ccccf84dbef2e23413f240aad616e23cb6

  • SHA512

    d12e0b964694aee537ada129ad1829ad15bb0ad8d5dabe36d7248488bcfb51475fbdb7e641d717ee74e2c24bda75856ef3f9dbc5093015f970df086a63f671ff

  • SSDEEP

    12288:HFGhQAFkJu5UvDL9q+5prWLGX0Eari+0AFHofDRTf9TJYah9Pc3uh8VXUpB4iV:0hQFu5UvlqurWdmtAwt1DPaVW+iV

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c8c36b4cadb09dbdf863c1a4109c99a.bin
    .zip

    Password: infected

  • 8e6d8d43b27c595577df64ac072385ccf270ec2e73412e4f51b87091de276b25.exe
    .exe windows x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections