Overview

overview

10

Static

static

10

985a754dff...f6.exe

windows7-x64

10

985a754dff...f6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    abc231cbaeacc6a78ffb0b0b6c41d888.bin

  • Size

    1.8MB

  • MD5

    42cb625024c06ad519bf87e5a1d984f6

  • SHA1

    998bd344f3707ffaccef89d398a9156c1cc065fd

  • SHA256

    1cdcbdb244af5bdeb59a581d79a80a609dc5ece0fc16f68938e6ebca3454557e

  • SHA512

    334a4cce745b59ba35544c3c7e34b548016cbf0b2357c61e3b18d4b22c18f88fb1594d5a3edafb10fe2b80a77825dfb03db235ecc3a272d8c824d165db12d266

  • SSDEEP

    49152:vbRdHzB06U+KBPjBzPiiFFMWiq821yLRCBtR7RI1LI:vbba6UviiQ62CBD7RI1LI

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • abc231cbaeacc6a78ffb0b0b6c41d888.bin
    .zip

    Password: infected

  • 985a754dff1bbb8dd0417b2b5ed7bcae4b11e21e3cb601b3c71dacffe01ad2f6.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections