General

  • Target

    429943cfb42511a2f5931774e21060a0.bin

  • Size

    682KB

  • MD5

    fa928a32e9819805e8c90a82107f879b

  • SHA1

    80beeafec30e69bcf364439154b856d1518a6407

  • SHA256

    8c3e33495da8e467c0b3f47f49fe5432ab19a9387b7ac63b9d0737e01ebf0f17

  • SHA512

    16cc57fbef965b974968018ed3d2a2f3878ce8b739375c1a4f89b333194517d00c003453f1f90e781b2cefbb20a4a70121d8d6692d0ae493f99158640d4e65df

  • SSDEEP

    12288:Tp3fuJN2xXCADSsnLFdeEZsLRlBAWWGVACIAfCdcWTbDxVFhpdK4gDRSN0uiburO:NcN2xXC7snLfgLHB2GVAHAKdpjxVFhz4

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 429943cfb42511a2f5931774e21060a0.bin
    .zip

    Password: infected

  • bd5b96ee1c0e001cbec2c1fdcce33aea7f0ca8359c7dbc701d34dabe81a2044f.exe
    .exe windows:5 windows x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections