General

  • Target

    f6bf7f27897a06a9d811732cd9b608e1.bin

  • Size

    713KB

  • MD5

    336da82f8dd791d3cdd0517596172f30

  • SHA1

    a4d8f5c84cf504e6efbe4f4f31a408db7ef589a8

  • SHA256

    0c90b7e619fa0ba266febc8d5925a964bb0e05bcb1fd55316cc5548646905cbc

  • SHA512

    680421bd716a3a2845b8f9f00735859fb52b3da2436865dc87a66bd3f504b7e9342b7b80fc9521bb4fa2423a7dc555e9b0f190250bf28943d11252da401aeb6e

  • SSDEEP

    12288:83pdJ2EeLXs6FuBuLYEfg9+8lj8YYDv6MLHRJI00ztDtkSMLkW:XnGplnY7PvitxBM4W

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f6bf7f27897a06a9d811732cd9b608e1.bin
    .zip

    Password: infected

  • 0cdcc03848c1c403215a2e8445c3918f893ee145d4ea5b175d62bf47de0dfb35.exe
    .exe windows x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections