General

  • Target

    27915b065e4ce2a1a6e069838676313319a818da7e9ec5d685e24afcb3d412f3

  • Size

    416KB

  • MD5

    d52606149d683dc3587ded4ca3450438

  • SHA1

    91dfd4f7409bd73115df2eb095a517b54e3744d3

  • SHA256

    27915b065e4ce2a1a6e069838676313319a818da7e9ec5d685e24afcb3d412f3

  • SHA512

    ef3c21f27f2f26c43074933b3976df8419d10141a19900de3f574d0b5353f4da0d9c47f30b81cab3c432b10becf1fd9ad269e132d48a6ff2e22416741ec063f9

  • SSDEEP

    12288:cEhyXTs3HcbnAa2IjAffAyXEuUsex40G8A:B3EnAXIUffvEu44N

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 27915b065e4ce2a1a6e069838676313319a818da7e9ec5d685e24afcb3d412f3
    .zip

    Password: infected

  • 82605b3e2083ba7ffaebc606fe6126c1e2b3fe56438b23e548dedd9b52a6fcf3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections