General

  • Target

    3ee661f4a9794c72a91fa1f783f54969.bin

  • Size

    573KB

  • MD5

    66aa25b833efef1173c37856fe83c048

  • SHA1

    abbb889519020ecc3709d4324a60684fa7d025ad

  • SHA256

    e309910b0957a7daee75d1838a5e125cddb6886190094e9846a5b55a36fcaf9d

  • SHA512

    125b0def8d216149cd3adc1308b5fbe3afecdaa25c618d2a85e477ac3216791866a2a9b2a64d420a5207632e71083f16088e2df25499cafa546176198aaa6e4f

  • SSDEEP

    12288:jtpcsB5RVD0CsMSR60ypLkfSx/KW01JQLty+kt/2XD4:jtptB5RtsMSY9LkfkX01JQw+kteXD4

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ee661f4a9794c72a91fa1f783f54969.bin
    .zip

    Password: infected

  • ebcaf07121ce2483989e7a71d00b83c54b942f71e51271d5b28886ef03e45b51.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections