General

  • Target

    BlackPensil.exe

  • Size

    2.6MB

  • MD5

    556331630a4c1e391bb5db8dd38fa757

  • SHA1

    a9ecfd7982f78a544ede328ea05de08e7963ea5e

  • SHA256

    2dc3e54affced8154e1e6d0e6731330db33ca31f77099a0f8dbbe875974d0a4f

  • SHA512

    1f4bdc05f73f0d5fe4fe0b9ea39524fab2efcf9a00835de8679fdbc2836c12902dcc43a31f710112ed1823ad0dc7649950803c6ccd7ef984ea9e32c9d028adcf

  • SSDEEP

    49152:UbA309E8Fr9SWLLTIlkZxCgpQh/8BCbmU5KQX4:UbRE83LLlxC8QTSU5Jo

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BlackPensil.exe
    .exe windows:5 windows x86

    Password: aboba123

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections