General

  • Target

    start.bat

  • Size

    3.1MB

  • MD5

    faad04bd754af1b4cf0dac950ced5183

  • SHA1

    a057726d0dbc0bf945dba25b64bd6219bdf524cf

  • SHA256

    7288a50308189b135503011afbd1a1901c5fc12b2c0112a04669b77e357652f0

  • SHA512

    2f01c46d1b2e12d74d4b28d05d876db86f6698d5bf650d0307df9b4f86ad50d393e3f4cdb3f340207fcf93b219a480664e862a3614816e4433adee92f2fa4437

  • SSDEEP

    49152:ubA3j/NccgP+LV+bHQ8LivEm9IkmJ571CPw/e18gbyP0rnWaF:ubUKcHsXivBIkmf1JS8iznWaF

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • start.bat
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections