General

  • Target

    5d329190630c5c051e1b2c4ad4c69abd.bin

  • Size

    629KB

  • MD5

    441e84eb079c3d04e1653d2a182893bf

  • SHA1

    22f146670f306d389c2ba6ba651399bb0eb14565

  • SHA256

    174f0279f6f5286b26a166d07160c31e409d483bb5b68313f67e5bf1b23ec850

  • SHA512

    f29d83be32f861e4412646183d14b2a516abcc161176709f93162ce3e4a69baaf18e903a6c6f01a4333a4b1b7b97c75646ba29c1f2f151f71356316b9447c080

  • SSDEEP

    12288:2BAgWGgU7M4suGaWwfwIxbu1V2zCw1100h38ilNz3UjWT4EJprW:FIUj6YIQ9O0W3/lNAjS4E/W

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5d329190630c5c051e1b2c4ad4c69abd.bin
    .zip

    Password: infected

  • 6974f159cb6e056fd9675ec4ecb6d271a7d6bb69711a295be593091d3bcb9e45.exe
    .exe windows:5 windows x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections