General

  • Target

    40c500a3b5442fa218bdcde8a69936ae.bin

  • Size

    364KB

  • MD5

    331ab3dbce2bc28f2d05910690650cc3

  • SHA1

    215870271ba9488a5494e6848d6cf6544e43fe54

  • SHA256

    69dd09f6848a73013ec90c4de13923fff3fb4aecddc847e0ab8d93609360de4e

  • SHA512

    3d460e44a58e7356dd1231433211937eec722ab4804b516031879b119b4a9432c2cb6308cc5d402925039f52fb44e481760c38ceb8098d9b5d213a5d97edd8c6

  • SSDEEP

    6144:eSuqH+dVDSv/hwkbVjp3fz4ZsllLcrPoKBM5toJCdffk6pjM0mec0R5Vf/GyWV9Q:eSd0VDl8FHlGPoqM5tUk8EJ5J2kS4

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 40c500a3b5442fa218bdcde8a69936ae.bin
    .zip

    Password: infected

  • ac0fc303f893f17ebe04ea11090b5c6787357a3a6f4d4d2e12fe14e84f10b340.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections