General

  • Target

    97a02921ff06b071f3a85c0e8cc98a80.bin

  • Size

    595KB

  • MD5

    a48fa331fc5b7ff53e8208991677a103

  • SHA1

    b86ac109e92515deae35bcae5b763d5b4f70643c

  • SHA256

    774779363c1b904f71ed796625ffd43e5ee0c64c1bb3b8fb362d8c3f5bd425c6

  • SHA512

    f0b8583f4943a34107c0a694b89bb772c6a4cdd46d6fcdd0ad81e41ff4124ec27d41bb3b5f4b2e4b492875b4c263dcf518da716ebc2b7a7a69b0e17d78a3e6f7

  • SSDEEP

    12288:9utUiAqOgyD8WuAmLNEqoXldbyczEIr+YMyVYQ0oojRBd:ItUCTNi7yc4vY/Ml

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 97a02921ff06b071f3a85c0e8cc98a80.bin
    .zip

    Password: infected

  • 3f4fe6774def87f9863396e9658ada2e2ca054546bda713c9bccb92da9594aca.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections