General

  • Target

    NEAS.628b72d02369a208523e64bf32d0dab0.exe

  • Size

    783KB

  • MD5

    628b72d02369a208523e64bf32d0dab0

  • SHA1

    b7012160fbc5a3879851478c7b0c4da1d201b7eb

  • SHA256

    a6e2effcd9cdbeb5647e1f27fb3b765db5dcdbec5ffa6a73661ae226365e71b0

  • SHA512

    8e0e04ee34b6529eaa34afa6a4cc563a86d6f045df7adef52b6925c894977fb4bc7f41c7d73576d06d8735e79349460604d38d03bd4d2c2abbc85e6251d668a3

  • SSDEEP

    12288:GqnOYxdAgpoNeF91rg5iFdr0yQ9gYx+EIpakCYJRU7Q9bWoFzqK:G+OQbpbgsFdAyQvzSqaq8q

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.628b72d02369a208523e64bf32d0dab0.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections