General

  • Target

    025e30c61b7b2498e8f2dd87b3b088b7.bin

  • Size

    2.4MB

  • MD5

    47bb497a1321a25c88b68d9c2bec42cf

  • SHA1

    bb7c39ddfcc57031bad7eb38aee003f82eb35bb0

  • SHA256

    c215bdd2f60ea9341b12b80e5bb9be8c7ef475242ce709060920cfbc09a024a4

  • SHA512

    617de54773456fb0f24bb3664f1f44503db0d46348756a7106bc5911d1636f9fe8e97291cb6a010f3009a811b998c2f23572bf6dce8f01f3f5bd0a0e21e1376a

  • SSDEEP

    49152:NxSS1w1gKGfYWP/Fy6upWb2Ce74jfLJyzDxPy1MyxPOPDYULpD3wQ:CSK1gKmYWKWb270LJ2YVPOLFlDgQ

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 025e30c61b7b2498e8f2dd87b3b088b7.bin
    .zip

    Password: infected

  • 2f77a20ba2eacdaf74acc2be52db30061d378a817ea3ac1812ef1c95f23f735e.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections