General

  • Target

    123.bat

  • Size

    1.2MB

  • MD5

    af1285ace59caeb75dd5dc3aaf7d80f1

  • SHA1

    2984d4eef8d54e0c9c5d7c84af7c4cab1fe74f41

  • SHA256

    596be26e0d1db72ea7e9bc262390df67b0d096090dc11d134cf1f2af2e03dcb0

  • SHA512

    1a42a8967dc6c0a6ab9a54e98392c5a02dab7184707ff7a43036877c4ce62b29a553637bbfab64f6316baf3c17cdbd2ec024b67d1bd09ca9173a8c6314e02680

  • SSDEEP

    24576:32G/nvxW3Ww0t92L7cLU86oBqpddsq5DPJzPA:3bA30S7zo+ddsqY

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 123.bat
    .exe windows:4 windows x86 arch:x86

    Password: 1212


    Headers

    Sections