General

  • Target

    9a84688aca96d89b149e213f6d059bfb.bin

  • Size

    535KB

  • MD5

    d4e4b1b384aaca45183122ecf4ebc625

  • SHA1

    8b61b1bd976eb21cebba1c4b0f26a0c68e6f9955

  • SHA256

    55cfe2872f201e29e47320bdd581a94eeb38b8d34c32a59faff722b7aefc4aad

  • SHA512

    43b82865a712383fb09ec7e8848b514fe5bb7924766876686a0da8bd7b1c8f72d162a1fa5fded36508cbde87c2f4068c6fea6ec38da6ba8d08ea4cd6e338617d

  • SSDEEP

    12288:s+U8zxARCKt1OyAZ3YTFCW/9GR/+KHQhs8Cya2luWhL:rdqCKt1w3YpR/8R/+KHQlHf

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9a84688aca96d89b149e213f6d059bfb.bin
    .zip

    Password: infected

  • f8ee97725f7f1cdf37b5899e287c8497293e76ab372ee22bd9922ba3624e1b52.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections