General

  • Target

    48b3fa168f6d6d72822b97c36c6fbc58.exe

  • Size

    1.3MB

  • MD5

    48b3fa168f6d6d72822b97c36c6fbc58

  • SHA1

    19e107e8cd7217f1c559e1f6067e3738ae7536f9

  • SHA256

    b269c3d7c8ae27f29ce8a18037a46df3df8e9587645bfec65339c9bc59eff469

  • SHA512

    3eb88d3cf8e124789e4e7314b0954127051f87c4c050980fbd9681f774b95cf30bc5b5e6c90e316585b3e9379b9f6a61398d1366fcc365f5c4cd033a810aad1c

  • SSDEEP

    24576:XXGJDQf6vi2iGU28vcqxpaDBmTT+FLwxPOSnU61nAqFGO:XXKw2iZHEY2CnUhqF

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 48b3fa168f6d6d72822b97c36c6fbc58.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections