General

  • Target

    tmp

  • Size

    1.8MB

  • MD5

    97b070fa7f067cddf66fe81b07681b85

  • SHA1

    737bf153f1393994ecd3e1cf398fb25a79d51021

  • SHA256

    ab8cfb0d50c8feb5c77a10db15e3bcc8d84cef5ef975236ec5408d740bf42c4c

  • SHA512

    646da2597e1586c2b1ed3686342170f079851d8e99af321ac64f44ef24420337b121a802c94c4a9867618e8801173f40cb68d6f9e3c01ba45e5dbaa01902e9fe

  • SSDEEP

    49152:ubA3jKjzDtbhBU1v04toqOFvwjfrO1NJB2I:ubVzNhBUZZ9YvG4f2I

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tmp
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections