General

  • Target

    a837da60643679493bdca8c00d64611c.bin

  • Size

    1.4MB

  • MD5

    d6c6130588b33e9977731a54fa1cd00b

  • SHA1

    b5d0dcb1cc931f37ff855c7d42f88b59531658c9

  • SHA256

    5700fc62df50364b13e7d0d9f510901cb9e7b060bce3fc9c99d8bff06c36bbfa

  • SHA512

    7bd41ddcf0220b8dec3602c59fe9971790dd58c4a1aa958ff8143c71b2ce953df4f5b0c0a9b919e2c55ce407be5eb542ddc658a5c7c365be7fd1fab81ec5ed93

  • SSDEEP

    24576:DuZ+RXzdcoQotqDtAl3WiGwF90X6IDahkGoy4ZTQ31sOGBRk:DVXzzPYpKmiGW90KxBo9c3eOGBRk

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a837da60643679493bdca8c00d64611c.bin
    .zip

    Password: infected

  • 855be39c3b980dbc9be89124bbe9f3e4fb660cab6a4e84af15fba8379b9eb2a7.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections