General

  • Target

    18397ba48576ad2456729c000b13f211.bin

  • Size

    2.2MB

  • MD5

    462fcb7dbf0b0b957317d1f25419a3c3

  • SHA1

    013ac4c143d50e868bf4105a20f249c7a0cccc8c

  • SHA256

    e52755cc7b7583510ada185cb4be5bd32b8c6b3dd5eeb14904a776853436ce91

  • SHA512

    f38220075a318d9d25c8c35dde6984c69f79491aa1d7ac06c9b3a150d13c7aaeefe7232ba87b47f74302f0a42811e91e6e2e3cfb26a4974856c4c6151198e517

  • SSDEEP

    49152:Uo2OaaAxJMXti/pqKR0d0Ti2/2sM9WSPjKF+MNm4fFU7v2C0htYy:UoG9IXUb+E0sO7gNmleC0vl

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 18397ba48576ad2456729c000b13f211.bin
    .zip

    Password: infected

  • 5ebf567e06a8ae2e62c5a2780db96e9ed0f958868d7cce7b7e0eef9079e065e4.exe
    .exe windows x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections