General

  • Target

    SolaraBootsrapper.rar

  • Size

    6.1MB

  • MD5

    706df4069dacbd0cd0d80c5319431eec

  • SHA1

    e582f777cc585cdbc45c1eeafcef2307727c1f17

  • SHA256

    53d6112deaab099a9da782ba5fe8ccf729b2b1328bb0a62afdc9f09f9cd427c6

  • SHA512

    e74da6eff06a8627dec2fc0f5619cbfe55d4244167679951c905367f8625f5da7638d29b34cdc7d524d02d5f8b6d1acdda407eb679638d75a87d6abea2ad4f78

  • SSDEEP

    196608:76l2VFjUSLzLnFdH1ysmVYEaqr7xzFPST7x91G/5rF:7RUSLzDFdHAJV/RHtN0x9WF

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SolaraBootsrapper.rar
    .rar

    Password: 123

  • Youtube.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123


    Headers

    Sections