General

  • Target

    2654cf7f87e8aa432528dc78fedb324f.bin

  • Size

    1.3MB

  • MD5

    484f5d3b2b4894a2f3e40f79281d01ee

  • SHA1

    39500aa4f9cab7e0ecf4dc0f2f11e06795e73ff3

  • SHA256

    7bd74a3b4b21d6a55d3da944758e620a8edf8692cf94d1ff1e6721740ddff227

  • SHA512

    1de1413d82c9eb2a82d44e99d3f2a21ac029d3e46b36b920375333b8f0e535512c0bb6ef6efdd33ec2546e20298a819c78e4a67415b24f33f9c2a7a3e94207c4

  • SSDEEP

    24576:gs2CqBF2DK+BRRu1U+K2sKwVko6Xuiiy/+Oa9PTMZamOFj:g2qBYR6U+K4oM7+OqMHOFj

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2654cf7f87e8aa432528dc78fedb324f.bin
    .zip

    Password: infected

  • b018f5a66001f1ccb3553465778d7a65d04d7a0925ac925b692bfbedcbc08295.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections