Resubmissions

24/12/2023, 13:49

231224-q42jmacafm 10

24/12/2023, 13:35

231224-qv486acadm 10

General

  • Target

    Client.exe

  • Size

    3.7MB

  • MD5

    ab25b3e9106991aa2f04f25899acee1e

  • SHA1

    9fcccc953c780302903379677de77ed73ecb584e

  • SHA256

    6d688732e035e85782e973ab26212e4c8c90f3be7c4497024c5259f66041b156

  • SHA512

    f1feea99e12b6a4d910edfc954b23ad291bab9e543cb8d55a855c7a3162d2065e66ece3842e894b46e94d9ab598660fd8e5e12f6b84a5f302bfc14ec1726946f

  • SSDEEP

    49152:UbA30HCe+DR54LKQilmCFInCAGOSgeNQwfj83u1xgj4vD7mAlvPgP1BwJWOyNjQY:UbODRHQbCFErj53u4j4vfhvY7wF8j

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections