General

  • Target

    1e9a88aba7de675e6d7d385cfba393e9.bin

  • Size

    961KB

  • MD5

    56ef996dc3d869f97b190d126090c4e1

  • SHA1

    c9dc0c9bb121a7b9c4e90417d838c5831fc9d5dc

  • SHA256

    eb1ab2daa7873dc6fddf4a97788d3b353e71d47f6e4ec3915116667f617824cc

  • SHA512

    19da3e01369500fcefecb9d94d0456875c0366472dacd5858e963e28b5388eba15a36cec4847667e5b214d5cd888b8fd7ce2b268aa3456e48c605e1f9bf6373c

  • SSDEEP

    24576:mnDwrakibvsf7W7XH/leRhYz9vTy6l6JLi69xC953:mnksbvuCfIDYz9vu6l6J26jC3

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e9a88aba7de675e6d7d385cfba393e9.bin
    .zip

    Password: infected

  • f3f9b1658338c551bb07cd481170b4177408df088d9686b8912e6bbb6f6551cd.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections