General

  • Target

    start.bat

  • Size

    3.0MB

  • MD5

    a283310d0da037073e2f355209093acd

  • SHA1

    7274bcf42f433d4867f870bd98876f5e26bbd0c7

  • SHA256

    3bf768b9ab1168736d5efa476604bde97d5c7815a82dc9b1786b02dde6929586

  • SHA512

    8c209c54b2efe6b2d4e0227db29dcf833b995d2b520c05999b9ab8de5a723d20b4dd907d0c532244d663cdc7f8e99ed5f17a71b8a79eca5cffa7e83f7060ad0d

  • SSDEEP

    49152:ubA3jtxILGVq+ZCOT9YS0U2HOoTOJDAShl7Ibn4T18Lr7A:ubBL7cySMlySShCj4mr0

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • start.bat
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections