Resubmissions

13/08/2024, 17:33

240813-v47g4a1hlr 10

13/08/2024, 17:28

240813-v2fllawhqd 10

General

  • Target

    Serverwinperf.exe

  • Size

    828KB

  • MD5

    ba9571506afe15b140b537e7e9e247a4

  • SHA1

    a97f7c6f8165e15d86ab5d1ca4ffd45dc2dcb732

  • SHA256

    3aea70e69661978044d8e2e123163921c2d00f19e29d4d99a239b5d7816ca7c8

  • SHA512

    266cd3f133d39b979e5c9fc6c41ac132d166288e9ccfa59d1e1c3e25e1f4f73b512211ce4deeb474c5d19f9898cfaa1de9ef721921f0891d90b75b0d434f84e9

  • SSDEEP

    12288:9t6uIpTo8yBQs7vW1Jg+8z3+9/fdEHr65zjFMRBVs6e:9tOTo8xCvW1JglTKYr6gbVs6e

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Serverwinperf.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections