General

  • Target

    cheast_all_play.zip

  • Size

    599KB

  • MD5

    a473930bfa58ae313e61278e1c4a272e

  • SHA1

    55858bc206a47ae09cfbfc99c534b36f66906424

  • SHA256

    e8eeae82a89a690142ad13aa0d85d15cd72c63d43e03a9ffc9757ac9fcb4c396

  • SHA512

    ce391d594a5dbd31f268ad5cf59b8457f868593fcba0a1bf225fa4000c1a35b969ecb406b1df1500186f0c38ea99b4bb4feee3e1398672d5bd57e2591a950596

  • SSDEEP

    12288:hmD9d8AzMWVVpI36KtX5snWwTFb1qg5WEhC2HZoOBBJ:M2AzMSI3VtXuWwTFb1qg5WEhCeH9

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cheast_all_play.zip
    .zip

    Password: 123

  • cheast_all_play/cheast all play.exe
    .exe windows:5 windows x86 arch:x86

    Password: 123

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections