General

  • Target

    28b4fe706983dca60bd9cb0b166710478c7a4ed12cb05d78a9b18b7c49891848

  • Size

    2.0MB

  • MD5

    03072d38c3624e9d7d83016a9069b2bd

  • SHA1

    b6bc417dbb785265bbfdec6f5c8cb4b6928c1c2b

  • SHA256

    28b4fe706983dca60bd9cb0b166710478c7a4ed12cb05d78a9b18b7c49891848

  • SHA512

    f5300200abd8bec5d317f42617f90edd4243a9f4bd6aee05d61d72d331a4f71a13f7b118b49b9df8152bdf5b3cb6ea5711a0406b2ae5979d6579a8a2b75b2710

  • SSDEEP

    49152:lqHEuTrhUqQcvwHnX9B0gQ1TgqAsoqbBmXob3:wHrUqQcvQnX9B0gQ1TgqAsRVmXob3

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 28b4fe706983dca60bd9cb0b166710478c7a4ed12cb05d78a9b18b7c49891848
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections