General

  • Target

    499f14a1e407d82bac24d6ac62b1f7ee.bin

  • Size

    1.9MB

  • MD5

    eb2e463cb9a33267ae9e30734965ac39

  • SHA1

    1f274615048f775755fc0659df5002531e4949f1

  • SHA256

    07ded566e4fb6aef08946ca3aa07ccc46d53df78a7716280410801bcf2f48cec

  • SHA512

    1880e77350f4b578fb98dc8c4441d638f8d0ff7300474657c2ae3f123846388985ba8edb373a526db38606e171ff12eac6300089f1ce41978af6237931c30f68

  • SSDEEP

    49152:2IuxyFTxI9kbyolBF10kxdULBYVh7l2k2DlAEy/bmq+a:2IuxyFTxvby+F10rLa3lwiEyaq+a

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 499f14a1e407d82bac24d6ac62b1f7ee.bin
    .zip

    Password: infected

  • c7d5c20a8f8704cd72855276ade10f22dc95cbce0d89aedcaab2ad64a8753693.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections