General

  • Target

    48fda1bb763be6ccc3c25c9538c75d0d.bin

  • Size

    1003KB

  • MD5

    babe246d319dbafa599df71af469406d

  • SHA1

    037ebe9606e327635819bb41e06d14976d1fa90c

  • SHA256

    63faba617f7c086ded3cb23b7a3391e1fedd3355168b48d0e509d17db2f2447c

  • SHA512

    f064e927439142081a9717df92249c8581e6801b7ed64da1e4063ce26eaeec9b3610e16d219060ad37e0458a39b5e9379292467458b536e6be462bc7107658ca

  • SSDEEP

    24576:GSM3uBKlZSrk2sSNwRxmnVaMyr68vZkzXiI8YLnZi24:GSMTT8sx6n4MW68v+zXR8Yli24

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 48fda1bb763be6ccc3c25c9538c75d0d.bin
    .zip

    Password: infected

  • 5f274892334da5c93d893a9619f5edf573f560faea7a766a680ffbb223ffe7d5.bin
    .exe windows x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections