General

  • Target

    Wave.rar

  • Size

    5.8MB

  • MD5

    f8f3ea18a2670f9c314ebcfc4c6b644f

  • SHA1

    9abcee5e18e138743fb73ad16445b4df128bd046

  • SHA256

    cf4abf0a76c5310d2c85a7ae11942ea8679c5e35d3f9d09e28db638428efc2b5

  • SHA512

    2545bc9f34dbfc5894d7dc5477a86292089de3ba9d5eb80ef4aed312ebad351fd4fb2aa050b6f2c4332e4d71c68243c3f77cb80f0a53a1ef8ab2583166de4eba

  • SSDEEP

    98304:IcAr1vsy4g3uEwL13D0vBisoR6xwv8kApilwY0tWDWGlLkr8Kf0RHSBdJz:IcArtsu3uEwp3jsBmApil10t+WIkoKfF

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Wave.rar
    .rar

    Password: 123

  • Wave.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123


    Headers

    Sections