General

  • Target

    4f486217bd3e8bef8a8ba6c89f9f4ee3.bin

  • Size

    594KB

  • MD5

    e90d860751298bcbf691b4a1e25d4c66

  • SHA1

    08153c7f25447a80485c84e33d2bf95f201bf749

  • SHA256

    565eec5926c77c4f47dc4ae86e35f63c71480cbd021a69a4b29fa716d87a3527

  • SHA512

    228915942096db4b6e6eda05d49cbe08e896812b3c50cbbbfe48de1ccfa577df90d3e84f0b1a8a3cd3ce58295659b3282986ff87e35b30f24cfc946dccf4bdf9

  • SSDEEP

    12288:JKsEqvecrkViOJ+YUb+gMEoY0H0ZbVAV8i5O+y:RtvrkYdD+mH0Unm86Oh

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f486217bd3e8bef8a8ba6c89f9f4ee3.bin
    .zip

    Password: infected

  • 2f49d5afa516d56f39663428ff111295df5dbddf2bbe6c64c049c67348cbcedf.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections