General

  • Target

    04dfbc17a5d59fe23f729175cc485a86211b55190613d88247386e4baea05534.zip

  • Size

    3.2MB

  • MD5

    9976b4c8c13675bf8c536da310faa7bb

  • SHA1

    34c293f8ecf773301c6b2cdb8971fd8b70722e2f

  • SHA256

    f8ac32fd2f1b7156fa36ccf23aea68f5fb1db72e4532d04f480aa7e2eff6aad0

  • SHA512

    10959ba3a9f9920bfb1a2bf458742a489df53474b9e7982892a46edb829c722b9517c6e56a0b9979e5ea1afa74a6241ac952590d80795f93bef974b921c54c5b

  • SSDEEP

    98304:UZzNMRPoCy2CaHhEfnImIp9fZGN45tKB9ytrlDa9:UZJMVBEAmIp9fDtSUTa9

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 04dfbc17a5d59fe23f729175cc485a86211b55190613d88247386e4baea05534.zip
    .zip

    Password: infected

  • 04dfbc17a5d59fe23f729175cc485a86211b55190613d88247386e4baea05534.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections