General

  • Target

    NEAS.30f4860e18f381be55dbdc02932d6800.exe

  • Size

    783KB

  • MD5

    30f4860e18f381be55dbdc02932d6800

  • SHA1

    c2af48fb837af3847f90dc05fa8d1c0ca52c4c42

  • SHA256

    bf318ed6d21d33d44f75094870726c60cfcf1e2e5be8097e4862d841dcc41617

  • SHA512

    fd6a3c451f9a5a9e470a9a7f152c9f2cd4f258043761cad7dbc297999cc1842c7ca0ce0a562af7893946027ed867aeeb610daa90bc3ee420e4c9373485dacea4

  • SSDEEP

    12288:mqnOYxdAgpoNeF91rg5iFdr0yQ9gYx+EIpakCYJRU7Q9bWoFzqK:m+OQbpbgsFdAyQvzSqaq8q

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.30f4860e18f381be55dbdc02932d6800.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections