General

  • Target

    9844983001aad66401cf152d4b1a270c932f1c33223774a870b1dc2b2d8ae054

  • Size

    577KB

  • MD5

    0f084796bc02ffd200bbc0880d4a209d

  • SHA1

    91d5c2b5210018b7a0cf60a21ca004be45c1b199

  • SHA256

    9844983001aad66401cf152d4b1a270c932f1c33223774a870b1dc2b2d8ae054

  • SHA512

    f8966c45c19069d106b956022ab41f2320572cef45821daa8b4257259265259360175c64181e7bfe8a895bdcce5e587810b30f59931a204ec922b37c97552e68

  • SSDEEP

    12288:EYHCSSd7TdJi0mZlVzNeFWyeJ100NiqqubGuMm4ZagENe6zUVFm:EWDYxhmZfByeJy2hGuM3ZapQVFm

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9844983001aad66401cf152d4b1a270c932f1c33223774a870b1dc2b2d8ae054
    .zip

    Password: infected

  • 17e36536f236d0effd2850906ccd9972beb6f73a994fe8c1bb03c2a850f453bb.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections