General

  • Target

    0c1b8d8d00d578c844a14875fb7599d3.exe

  • Size

    3.4MB

  • MD5

    0c1b8d8d00d578c844a14875fb7599d3

  • SHA1

    863f7b4b56908cb442ca705be7df48f3c96bf46b

  • SHA256

    3fa6ddcabcb03763ef1887117e16ebdf0553a1cc2a16b58bdecaba0735d4e60a

  • SHA512

    2f58e2f549a34c8b7dd00d709c244b9b767d148922a74ae1762cad72c01be9564cab30efc5bf6c7dc138df7124eb81ee6ed83acac737a202ad81f0de57a3b559

  • SSDEEP

    49152:TNYaZhQT1Wrf+VEo0k/3t/A/6jrX1zi4lernnF4iY5tTw/L/JZMAXHmOm:5YaZhQJWrWqA/3t/pD15eTv/JmAXm

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c1b8d8d00d578c844a14875fb7599d3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections