General

  • Target

    c158eab31c5a8fd2da093fd5130f1ec8

  • Size

    25.7MB

  • MD5

    c158eab31c5a8fd2da093fd5130f1ec8

  • SHA1

    b26bf14a694095e86cd63bf66049c37d87e6e0a4

  • SHA256

    67e68d1933e87f680f063203e7e243c33deba2dfdbcd2bb08e9205d3fff26fb8

  • SHA512

    abbfeaf563b6cdd45b45f51d29100f9c26f84f8505c5895b42d209ffb20abf8ff43cfa02938b46f732386724de0a7c0e7fd89bef0ed7adaebadb82cfd0f8bf52

  • SSDEEP

    786432:IsgLJYkWSW5gzVVh3cwBJJe9Fcik92l8fNkgAy:IjASW5g7h3JJ+FcjbfWgAy

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Detects Echelon Stealer payload 2 IoCs
  • Echelon family
  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • c158eab31c5a8fd2da093fd5130f1ec8
    .zip
  • 2222-main/Build.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections

  • 2222-main/NanoSense.dll
    .dll windows:6 windows x86 arch:x86

    34f983f36f4d8203a057fc665d889c2f


    Headers

    Imports

    Exports

    Sections

  • 2222-main/OTC.dll
    .dll windows:6 windows x86 arch:x86

    ebebcc504f1ce302539b750e002c57fb


    Headers

    Imports

    Sections

  • 2222-main/OTC2.dll
    .dll windows:6 windows x86 arch:x86

    b84aafd12d03c11da673be4eb5a77b52


    Headers

    Imports

    Sections

  • 2222-main/aurora.dll
    .dll windows:6 windows x86 arch:x86

    8b403f6a4086897dace4df2f3360dbc5


    Headers

    Imports

    Sections

  • 2222-main/fatality.dll
    .dll windows:6 windows x86 arch:x86

    da1edb4708da523a1057a7cda8279f2c


    Headers

    Imports

    Sections

  • 2222-main/gan.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 2222-main/mySThe.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • 2222-main/myporno.exe
    .exe windows:4 windows x86 arch:x86

    94400fe3e62cd2376124312fe435b8e4


    Headers

    Imports

    Sections

  • 2222-main/pandora.dll
    .dll windows:6 windows x86 arch:x86

    a7e5819df0acdb663fc62833a8ef745f


    Headers

    Imports

    Sections

  • 2222-main/pass.exe
    .exe windows:4 windows x86 arch:x86

    94400fe3e62cd2376124312fe435b8e4


    Headers

    Imports

    Sections

  • 2222-main/petya.exe
    .exe windows:5 windows x86 arch:x86

    1a63922d5931d1bb8ca5188313f78eaa


    Headers

    Imports

    Sections

  • 2222-main/sheyhST.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • 2222-main/stpastio.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 2222-main/test.exe
    .exe windows:4 windows x86 arch:x86

    0818438d729451edf8c455424695687b


    Headers

    Imports

    Sections

  • 2222-main/token.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 2222-main/ximay.exe
    .exe windows:4 windows x86 arch:x86

    94400fe3e62cd2376124312fe435b8e4


    Headers

    Imports

    Sections