General

  • Target

    36d7d4ba6152b5231920262b24dbb310.bin

  • Size

    1.5MB

  • MD5

    f92c8279d09a2de19b0f15f0124ee35b

  • SHA1

    e3a6b02085c599b9a5358daa0d18d3ba35535d7c

  • SHA256

    a60a404f76a90a2482619fe61ee86513289c82fb7bf5bd06f442ccd069a4b131

  • SHA512

    3e03cedc321b2bb650fd00a626c6edf30601a0d2b93643656c6d101999fbd7fdeddd5bc69231ebe7722151315ba869e09670206c0deaecd3f476961315bc2336

  • SSDEEP

    24576:cjYAt7uFtvRUkNedwdMrzsZCT1QAlk67pSvOwK0uZsRW7SelT2tVmG:c08KdPNScKzsYpQ5mV3LORWemTC

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 36d7d4ba6152b5231920262b24dbb310.bin
    .zip

    Password: infected

  • 2bd3273589e5380e4272ad07b77fbced86427d40246374dcfb1b58fef52de554.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections