General

  • Target

    679c989b6a378bab5dd436601942781f.exe

  • Size

    1.3MB

  • MD5

    679c989b6a378bab5dd436601942781f

  • SHA1

    17f39f43225563425ca39f6aa7eaf0a3b3dc0bf1

  • SHA256

    7224bbcf3bd6d87e1071cb7e0fb9777796401bf5dd8e8f1875ce5e21ccce8d8e

  • SHA512

    4141ef4a1172cd91764b9c21f9f48a828bb9e9d6c9e3ff304f426858a3730f66346045e4df279dd358b863a58b0d26fa83cddfcead823c7b01c0ca9cac11cedf

  • SSDEEP

    24576:u2G/nvxW3WieC+QfL5ZPRnmRme/kvHsTvn7AlVNMPQiJ:ubA3j+QNdIC27AlDjI

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 679c989b6a378bab5dd436601942781f.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections