General

  • Target

    c1558543c28c291bbc323af530421461b48ebe178fc4dda66d35b86b5594aa3b

  • Size

    3.0MB

  • MD5

    320211bb4d819f0df6d10c31d32cd307

  • SHA1

    6043db680d2ddb8dfe5d475c5e012a3533d15440

  • SHA256

    c1558543c28c291bbc323af530421461b48ebe178fc4dda66d35b86b5594aa3b

  • SHA512

    da5f2b3d95e716945a19cf04e4bfa9d75c755e6badd454a19956910427896389979c43de7bc989a19d375ac840c5a870af5af4be121f1f040d245e7c6f4db471

  • SSDEEP

    49152:zWH5UmjO9iWCf0fh6EkSGzSPmE4gQ98jJcAW9Knya9DAjw4BlyvBHLeXBPxOPoE2:zWZPqCuzk3zSz4998jeAWodE1BJBPAM

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c1558543c28c291bbc323af530421461b48ebe178fc4dda66d35b86b5594aa3b
    .zip

    Password: infected

  • 374290f4bc29e1d5a3295b8f23c281393075beae64db51cd5a5e96c03f9ef8b0.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections