General

  • Target

    Fix_Programms.rar

  • Size

    542KB

  • MD5

    4e03dd2d6e06c314da722bc16804004c

  • SHA1

    6c8de99eb45ad18cd68b3d54066b51f247a45059

  • SHA256

    743519e04e0d98d4438901948a52b9f4e131df16565a6a1483f999db0e579fd2

  • SHA512

    ce0dbc075a89ff61622b69621ef538facf5d1163030ad4e2061a346070c46bf5f930717dc87034eadaad96476f605a71a6d06a8f6f7f4649da198b9d707b9d0e

  • SSDEEP

    12288:64HYrUcmcYtRuFE7axzc2C35ETp+3VTvq30O2lky4X:64iUbK9c3J71vqhWkyk

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Fix_Programms.rar
    .rar

    Password: 123

  • svchost.bat
    .exe windows:5 windows x86 arch:x86

    Password: 123

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections