General

  • Target

    1cf1c8a6b74890f6d1913bf3b9e46a79.bin

  • Size

    1.2MB

  • MD5

    cd0068915c486f130ea5171c1e554fc1

  • SHA1

    1f85596232b305e17f428138cf4fb09da9da063d

  • SHA256

    d973afd9cfbb7f64c9c291742e25c8ac0639144da7f8a027413f7b6ac7a99944

  • SHA512

    dd8994934adea91262ba5ad2865d2308d0d8ce2b0f400d9a9993c054a519c8469aa84754e267bfb20cba9fe3928147ee9af5c80bbc0014ea209732b342e23a12

  • SSDEEP

    24576:lUiuJrVi9wYXwc6/0pkXocIUr+mUfNIptXuD5e4pvzH7GDew2mGMa:lU+9DiScIQ+maNIptew4B7rFVMa

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1cf1c8a6b74890f6d1913bf3b9e46a79.bin
    .zip

    Password: infected

  • 6efee44acf580c370d19926398438acb40a8c63120bad4e2502d8a847e011239.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections