General

  • Target

    deactivatorser2024.exe

  • Size

    1.4MB

  • MD5

    1c2a4446ed8c0de0800bbc200c336fba

  • SHA1

    ae4617a03cb030a37d10bfe7971906668d52a8d1

  • SHA256

    96b1f425194b4250ac894663183685df94f89bbcceb0c5a4e20a445f3ab7277b

  • SHA512

    33ef061283873edcf723072aa41e5d0e1a413493b896c8072bf7a3d7d6da6d81ae6734aa53b2c5efa4ed63a59ebeee4a983bd022dea35defdeb7cdea1ed948e1

  • SSDEEP

    24576:u2G/nvxW3WieCq0J4aDSmyssjMFmIXmjNXECgOn0Qh7H3bfE9ZKHei:ubA3jqrax8MF/wFbFnsmT

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • deactivatorser2024.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections