General

  • Target

    b53601c9a8821e5abea846e13424bf92.bin

  • Size

    910KB

  • MD5

    624b353073e7ab023143a1dcc4dda3c2

  • SHA1

    bc3be2e3a272d6c55198e7202fb60698157000b4

  • SHA256

    b4f9256f73b736e721c59b09e5b76748c63b6d656961302cf0de05360c47a03d

  • SHA512

    6fe198f219ff911d470fa1d1d1c6240db65e2a8c6e48581d5a39ff55c17658164d34a438568b565dc519f896a34e4f1d84c9668e8a0598fe09dfbad1a63364a3

  • SSDEEP

    12288:zaAD78ccWaNDAt2cC06jQUncSQrL7QDAXxFoxO9NxToBlK3RnGh72ahTy4AVMTqf:zlD7gO2kniDaFzNFoBkE2iTpAiouTyt

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b53601c9a8821e5abea846e13424bf92.bin
    .zip

    Password: infected

  • 3e55b54015ebcc09dce584c6963caaa487f62492f015f7daa4c645bcb7bb1bcd.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections