General

  • Target

    tmp

  • Size

    3.7MB

  • MD5

    e518d35ec5fc430fa09ecf844aadcc6c

  • SHA1

    a27e6eedfc527d7db7dcd3298bd078897eed1936

  • SHA256

    db9e61ab56d0cf5aecdbd7d8c70e32cca3bcbc4dded1576e99e5f45a6016ab02

  • SHA512

    6e35934b39221267ac6b03bb1630860bee01cdd8834081a0c45f201ec7ccab0db1d3edfb107cc74de481e7bfa04b39bdfe39716b0fc0d2fa9aad299281f57dca

  • SSDEEP

    49152:nRA3JTjxBWia+uZxlIJJ7KniN/QCRsdR7uPlaIc0gIc0vTvUPRTLGFUOwN:nRWTjWi5uHA4niBQzf7nIhgxcknGFfwN

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tmp
    .exe windows x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections