General

  • Target

    4887d44f5825ef6ded9a7da65bbcb7e5.bin

  • Size

    1.3MB

  • MD5

    0d31e2c50b97dda1ba6702448b2d0b74

  • SHA1

    e46d2bd8c2c5824fb372d72b17b6b62305a09225

  • SHA256

    4296d7876e7cbbc4489cde9f79a90c1e1b76d4ea1c583055569db13b849998f7

  • SHA512

    66126fa799ce95075be02ed1424960d12cfa1e4582656cf19c208873e2d11115a255c64a07b47f6a21740b0f23a5346013634717f53b791b3a94aabcfd346295

  • SSDEEP

    24576:4Bue6M7B4nTheT26TlcE4Ez4M36uwM8fEXFDqR8vl1bwJAQIenUYJK:sYM1gkqTuv8fEXRqKNeJhIlgK

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4887d44f5825ef6ded9a7da65bbcb7e5.bin
    .zip

    Password: infected

  • bfe50b1ade213b5f699739f7e47b6860cdcf9b7b5ba8d0a6701d2f6cbbe0d1fc.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections