General

  • Target

    cdd13d1de97a6ed5da19df954bf3594e.bin

  • Size

    1.6MB

  • MD5

    bc937363f3c91411837767379edd7b41

  • SHA1

    6323e2ed9f039b4ad3664f35f1194b8b16061ad7

  • SHA256

    d7b357a1dc078673b58e40a76985b160e67df957bcc0dd2d3582bd8546956a20

  • SHA512

    a503738d3cdb629107f502560ca1e313d2b3507e985e493b2a165a1a39b5f96cd55d4868e3b816a54aae7cb9c95e6fa55692cad53737394944c8aa2443b58851

  • SSDEEP

    49152:wikI0OolUYBcXQ/ycSnKcmLBLK6/xPBAAJ+:wdOoltEQy5IxKkdA

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cdd13d1de97a6ed5da19df954bf3594e.bin
    .zip

    Password: infected

  • 9c8b561cf27708f285da964826b1183608e75be698f6b5a4469faea8e535a760.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections