General

  • Target

    2c64c7b521a639d7fe66f201408a4b6b.bin

  • Size

    1.1MB

  • MD5

    c444db4a690f9bcec2c7ebb8a3f34351

  • SHA1

    5bb887e53e90b954fa08ee4ab06b36f80b8e8ade

  • SHA256

    595ed10acca5b3832972d19aaf88025567e786bd1311b7f61e8bca0f6298033a

  • SHA512

    ad99f48f0aad5749a293dde33c4f39ae48793290847d0d218cd2815e5f942c7c8163754b597f081e93b6ba8943460060957dc6e9a7ff73144d6d7235535e7e91

  • SSDEEP

    24576:MYxYMYYXr9QMU0o2DB/pEPLs4Y3/bEFkv24Wbzcz62+yo0M9Co:MYhYY79QfpEB/ULF+Qhfczt1M9Co

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2c64c7b521a639d7fe66f201408a4b6b.bin
    .zip

    Password: infected

  • c650b3087bc699cfd1843c00867f09ac0d5e7d244b9110f286827a32e378317e.exe
    .exe windows x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections