General

  • Target

    9bdc37ad1deff8c99eab148739de8a84df7db33a7810d697f17a60be406dc160

  • Size

    315KB

  • MD5

    966abbe81b55a421a822668657ce3fbd

  • SHA1

    d7cf53e69908fc433e3ec3375bbc524361c00bb1

  • SHA256

    9bdc37ad1deff8c99eab148739de8a84df7db33a7810d697f17a60be406dc160

  • SHA512

    0a7c7b2011adce35495bd252e0cd56e09e737ee757e89d96e1cbb32374023abfeb673c3912f2a9d1b45c1aa50d650b20e8ce16f92ef030b45e7b929e276dec39

  • SSDEEP

    6144:uE3Dey2oo7KlWSmTf3IY9sRqrrG2zD7jxOQto7l9Q/L4zjDxebWr9u:uq2N70xmTf99sIzDfa7bQU3DxFZ

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Detects executables containing bas64 encoded gzip files 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9bdc37ad1deff8c99eab148739de8a84df7db33a7810d697f17a60be406dc160
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections