General

  • Target

    nurik.exe

  • Size

    1.5MB

  • MD5

    a2793b7df0a6b0746c11a790540de37f

  • SHA1

    84492665c4c5da79d88464c4e3edbc68c75bf46e

  • SHA256

    c6bddba6b95017562348bd1fdaec1902cd53afaa5d2aebc4b19fd2b39e2428f4

  • SHA512

    16c45eaac1860292bf4985f607f9b86185fdf8b5cb6a076516a85705118d22258bf366ad40847c6d855ed9d2e40341bd344fb6b4a2420657890fe4d1cde3c687

  • SSDEEP

    24576:U2G/nvxW3Ww0tKMlJX1LSpMYh263Pis4EOpbvbYX1PKuHFCdAgqkbsYpsaK:UbA30KMTXq4Rr8FPFHFChjbsYpI

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nurik.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections