Resubmissions

15-06-2024 10:59

240615-m3p8es1hnj 10

General

  • Target

    NeverCry.exe

  • Size

    1.6MB

  • MD5

    7d90121240d8da918d6370c81f6649f7

  • SHA1

    d3e344ce25305e9168790f462698d9cbc90b23d3

  • SHA256

    689100d4db441ae245b7b6edc85cb739c15ab3a972653483c122ba174032b2db

  • SHA512

    d9675eba8aacf2d876400d9d4e22ae4f2af666ee1b72aa21a36b5f7e1518111ccf434e6a5cc08ae3f52fce4855b7baf90037614e358b2df392a2e20f3db9a319

  • SSDEEP

    24576:P2G/nvxW3WY0eWu+KIrnB46Yz5R6jIdQX4FcixLckFcBtcuuGzdxX7p1W0ppwl+b:PbA3cnjB4xZi0NGtcuzdV7pLrA+GkeMB

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NeverCry.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections