General

  • Target

    1070606475ed9490c4fe6a4b817d75ed.bin

  • Size

    2.1MB

  • MD5

    fc996784f36fe18e5aace574e178bd62

  • SHA1

    ff0153ee52ecc4a0ca70317eae0fabd3bc332934

  • SHA256

    6eec31844ba4b0c2c008ef00c521cb33e110b6754dd14ef4e60b05e633ab66c9

  • SHA512

    775541a8926037a3165782032549fe13c3f792dfc7b1bc80da017e50c611b8c23bc985de6b7185fef07a64b5d18a1299e46dcdc0cfbe1ab4d710d0f76c045d7a

  • SSDEEP

    49152:Jn/eVbqaE3nvoNilgQJ1vqbz+Uuvy0aMLeX8Yh:JnmVEnQN29az0yqeXjh

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1070606475ed9490c4fe6a4b817d75ed.bin
    .zip

    Password: infected

  • 8d7e7c63b0739df784f5db7c063be7b3ef2d1f6b6b71d76e0ed1e5b6592512a6.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections