General

  • Target

    aecc13f324a3d84d1c74952ccef9a190.bin

  • Size

    3.2MB

  • MD5

    6d7316c6654b1ceb4ddae6d2a0fc42f0

  • SHA1

    6926cf1c54b1cf1e59420933d1c1f041129f0146

  • SHA256

    b76130fab9acb20a6a7c6b5c6e578c263ba81d0e01c29e10662838d3ecd3d6e6

  • SHA512

    89fc6f91cb07a92ab62c3f434c2bae5dd1a16e06af6614e0f3b67f785532f9414c632aeff541be05bf064111d6571449597e779ca3f4853a6f9a7dfffec3bd36

  • SSDEEP

    49152:hja1xCMfVh0zhh55I1f4bmRtSiCeqxnoMXeDKdOexDJV9xQiHwEyqV+qWtNNoIrc:hjbkahIciCeuxXHxDJV9xTmqYNzqFN

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aecc13f324a3d84d1c74952ccef9a190.bin
    .zip

    Password: infected

  • 04dfbc17a5d59fe23f729175cc485a86211b55190613d88247386e4baea05534.exe
    .exe windows:5 windows x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections