General

  • Target

    a07df24fcb9105b0be3b921cd48eae9202bd7f929f5dd57efd8a37c238cd411c

  • Size

    414KB

  • MD5

    55ac31471148e1d779569105899b4b3b

  • SHA1

    4abe2c097dbf0f0ac4a246738f65fcd33fc23a72

  • SHA256

    a07df24fcb9105b0be3b921cd48eae9202bd7f929f5dd57efd8a37c238cd411c

  • SHA512

    d406b51df73c9d53060094a6a1b07e7ad982a6c00619f5d6f721f4eeaaf53857e98ccd25094adf434b2e233dea4d6d477d4509881cdec141b31c0deef1788b3f

  • SSDEEP

    6144:abtBWICM4hkNsNqvDwJKvTQ4d7kmbkyH9n17EIhXnBKEySOANqk/:ab3eM4ylIi84d7kmblRWQXA9rk/

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a07df24fcb9105b0be3b921cd48eae9202bd7f929f5dd57efd8a37c238cd411c
    .zip

    Password: infected

  • fed72a470e5c75ecdf5eabb18de614f7caeaa4a4f629989c0477fdf28d7a2f90.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections