General

  • Target

    b75f3bd22c5f11df1f79d931cdd17a565f27f8fe428f6367b5c5405162594e86.exe

  • Size

    1.8MB

  • MD5

    a23a4e57539ccd4ff0ab9432c9ce2c30

  • SHA1

    7deb446df72fe81b34a7458a064a9c97d952d2bc

  • SHA256

    b75f3bd22c5f11df1f79d931cdd17a565f27f8fe428f6367b5c5405162594e86

  • SHA512

    72fc376bc39ad86d87376421094f241ddf099381c2cc64ff640f52e47e49cb0a3c5aa5251896e444cc7c4fc30739aa45ae81c25e4e2c151a9a38d60efc49e145

  • SSDEEP

    24576:vPynBloE4l92x5Gn76FeRS6EOEm8sDHKvmjXOZQMne:HmBan92/8yF2DKKXH

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Detects executables containing bas64 encoded gzip files 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b75f3bd22c5f11df1f79d931cdd17a565f27f8fe428f6367b5c5405162594e86.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections