General

  • Target

    tmp

  • Size

    1.6MB

  • MD5

    12e0cf5b2e03c74d42559025197c2303

  • SHA1

    b7868ad595895b227fc64b4c535298d7f0271c76

  • SHA256

    2b50b2a01852533c80c7d29f96bbb620ebfe6eeefb5b74c60621e69ba68cc115

  • SHA512

    7dcabcf54720e6a6b212e43870f5384c51217afc27c1ae88e22cf6e72208a34e186c5d45c17e8822fec2cb0629625c9424ac161ecb3a20c94338af352291f251

  • SSDEEP

    24576:P2G/nvxW3W60xT6NZJzK0o9Kg8Q0rYtIXUCC8Kx7cJutaSW+GvwMv0:PbA3KxuX1KDtsMYb+GvG

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tmp
    .exe windows x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections