General

  • Target

    0f75836bf858f449d7c367c527e52846.bin

  • Size

    910KB

  • MD5

    06b091d90a8fb4b4ddad3f14813c91b2

  • SHA1

    4fffb3d17d5bc47c06cd425f69284b07449ed160

  • SHA256

    edca0a337ae28052b15eeb4617ba6ad184043d0f9f59d67ec5d87d099fbc0359

  • SHA512

    99e70a6145cd8b3f1f7a0db23e4db8c4d27d02a89533df0ed31eaf09565d765de9c3280cc630e6dbc48f964df7379a112a8916cd0defa9bb0896673606ddf6b9

  • SSDEEP

    24576:4weUuy8beuTZS6e7cjezg54pvg0ko1THlp/np1rkjVgF+:4A8beC47ies5Ig0ko1THlpx2jVgF+

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f75836bf858f449d7c367c527e52846.bin
    .zip

    Password: infected

  • 6679397d43cb816bfcddd2e6719235bd7477c5e3090644612e071e4462893c3d.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections