General
-
Target
36143cc11130b979d02636fcac9a4e5c46f133666c1820f9ca66fa21a403cf82
-
Size
952KB
-
MD5
7c2406ecb9df5839cd05a6624b0ce186
-
SHA1
45baaf5461ca7eca26b2b43d8782840436e2138b
-
SHA256
36143cc11130b979d02636fcac9a4e5c46f133666c1820f9ca66fa21a403cf82
-
SHA512
365ba58966e89765d3e2eab0074bbbfceead0209c1f3998f9ea89d5a45bab58914ac38cb912df211ad73acf685dbce8e8bbe1be3f6d9f54afb1ce4b46fea9f07
-
SSDEEP
24576:2+O7F9smBDJwWmIezBLwsHuWbxR4AK5ZJXX:R8/KfRTK
Score
10/10
Malware Config
Signatures
-
DCRat payload 1 IoCs
Detects payload of DCRat, commonly dropped by NSIS installers.
-
Dcrat family
-
Detects executables containing bas64 encoded gzip files 1 IoCs
-
Detects executables referencing many confidential data stores found in browsers, mail clients, cryptocurreny wallets, etc. Observed in information stealers 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
36143cc11130b979d02636fcac9a4e5c46f133666c1820f9ca66fa21a403cf82
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections