General

  • Target

    3452c368e7e8508c071880901d6793fc.bin

  • Size

    2.3MB

  • MD5

    41e43647036dfdc78af9438b2cebe771

  • SHA1

    acfb28d6fe9488cd9603f96e4e60cacfd86377f1

  • SHA256

    c61b7cf6acff76b860a80aa8a99e569d2f45d2d8997adf9a5f27b3200be91def

  • SHA512

    78e72aefd3b17f8fd0ed2debd01c1c5d1ebe736ed6f486b06250e2925ec29181b25da3fd472b022e7d2f6298fb6294748f95c040e44672185b5fa1a11143e465

  • SSDEEP

    49152:D7MLtzkSY5YVFCqOD08KCSL1CSRJEtfeAHn6ByBdkl+u9utnuE87qrfXQ:eB85YVYITCSwSstWAaBl+AKuEBjg

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3452c368e7e8508c071880901d6793fc.bin
    .zip

    Password: infected

  • bb8bb941a6bdb6f4a71acea3f16a7347dd7714a6e484b9876e78f7d510f77022.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections