General

  • Target

    1914a09b8778f629800f52d3325dd4d2.bin

  • Size

    477KB

  • MD5

    bd8e31b32e48c1dd4e527e700461b687

  • SHA1

    39889ec929e813df5c1a36fc8b79353c62f431ef

  • SHA256

    84fd346c9dd80b656a39e69a5b95cc05f066cf1ff7e206f435a4f4c51d592cc7

  • SHA512

    1274b22570f8119dcfcef38c7cd6ccec283ca1b447a9369b5bc032ef1566bc745d70861c01799276a37873486295a1908110baa275674f9519f1af973b200b68

  • SSDEEP

    12288:L2g9fpezA6VP3e8YkObycNOe8nnZ8RSc9u9J/Gozp:59fpeA6CkObyqsnZJvtd

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1914a09b8778f629800f52d3325dd4d2.bin
    .zip

    Password: infected

  • 677381cd3ab2a42194c08cf03409862d8a50165a6d15f3a19a0a1864c990e21d.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections