General

  • Target

    03968dde73b9de527f04ed6f8e9fcfd4.bin

  • Size

    597KB

  • MD5

    4fe20881504bae9301217f973a2e5964

  • SHA1

    4eb534bcd803353854f3cc6fb45cc6aa19c3d020

  • SHA256

    f759cc53e9298df49a0e4823a92e10ff8f6cbb543bec9bf7f8149b9173c730a5

  • SHA512

    cbcf5835192153e62fbc5dece1b8552cc57e3a96715e196b5f2a142fad302b92500e96964f496646d655be67cf6c03068858e975391f70670b57702fba9a55d4

  • SSDEEP

    12288:0T/FHE48n1tgaSB9F87e7hoLAzx9TXg8zDMi/ODZgeggyeZG4YUfTL+5HIw:0T/2n1tlyowEoDg8zDMi/ODZg9eMCveJ

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 03968dde73b9de527f04ed6f8e9fcfd4.bin
    .zip

    Password: infected

  • faec2b93cf10adcf3bbb20d8d2b6224dc8d2452fe8ae11f652ab39c3165aedb0.exe
    .exe windows x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections