General

  • Target

    002243e5253cfd033a50b49302f7ec7c.bin

  • Size

    1.4MB

  • MD5

    3a0a64179ab999de72757bc462551825

  • SHA1

    ed7c49087da4e56d35c7ea67c46e371ab78199ca

  • SHA256

    3a12aea8833d8423f369dee8067110b52aa71d28d44fb3d0b38165d7b2d720d2

  • SHA512

    04a69b1b56d0f6d4d1df5017d20b4df2912ffcc4a0e722b33121f1632ed358837d149f43cb54021327f5b9e4f12a7262e6eabd7dbdb492d3fe1dcdd2bb5579ee

  • SSDEEP

    24576:cGssg7w6KwplTttRS8GvXRH0B0CsH0qpNiE+PNqZ5tvaL1dysix4D:czsrElT7RS9Hs5E0Q4rsZzqrysiI

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 002243e5253cfd033a50b49302f7ec7c.bin
    .zip

    Password: infected

  • bd92b5309471d738558909eda794cef44dfbc8a363b8be00048f1576536b8bf4.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections