General

  • Target

    dec52e96b535fca5f12dfa0da4eda236d723629223293a185f4a075b53651d3d

  • Size

    2.0MB

  • MD5

    a5a2534ce171e02dbca554a206f8dcbd

  • SHA1

    b0929a7f57b0c13f828477bec0f8e74ad6549a12

  • SHA256

    dec52e96b535fca5f12dfa0da4eda236d723629223293a185f4a075b53651d3d

  • SHA512

    f81604221551d3c83aec5e3407ad2a2a32946b8fb62e5a04a2a726ec89544e3169a2addacc72e18436610dba017f618d0a90b08a24d8bd83aa2b86c2721ee60d

  • SSDEEP

    24576:6n2XTCHM4xT9V3XzsHhVmatCELYIXVelAtgbHHd:kaTUv0jmtEttc

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Detects executables containing bas64 encoded gzip files 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dec52e96b535fca5f12dfa0da4eda236d723629223293a185f4a075b53651d3d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections