Overview

overview

10

Static

static

10

b56d3e6d1b...f9.exe

windows7-x64

10

b56d3e6d1b...f9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22acd327c5273659a31e56d94cefed20.bin

  • Size

    2.0MB

  • MD5

    81df1cb6e4c6d782868e86cec6f39f13

  • SHA1

    2625730db76400bf98dec98ab061b9583586d2db

  • SHA256

    bfa0c423e604775804fc07a8da4ca2c01bc2b6be1fc18b9546bcf04b8872cdca

  • SHA512

    b80066372d2d6f2b318c798db58662dd5eda07c936b18299ad63ae395e4cd6b57856c8fc2a935b3002d6a95a241ea73cf93f1dd4cfc9dff0545dce96e87981a4

  • SSDEEP

    49152:7hPnCL/mt+k4Y7xgzUjGaF62CsHyhyHdcdE9CmgZC:lPnkmUHmGzUjF6phCudEOC

Score
10/10
ratdcrat

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

    rat
  • Dcrat family
    dcrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 22acd327c5273659a31e56d94cefed20.bin
    .zip

    Password: infected

  • b56d3e6d1b59e49bbec7d67b46efdabcd4f63113d4937e713c017a5c8307c1f9.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections