General

  • Target

    38e59da7bfa1f9567e9968dc2c9486b1.bin

  • Size

    2.3MB

  • MD5

    22f4d94bbaed3800146a77788322358b

  • SHA1

    46acbe94b0cbc63fb67e42f58750a67aee6b15fe

  • SHA256

    99fe2b6dd95ac0332ad499ab99e98fd51d810f95f7b80aad33b2c0474deadaf9

  • SHA512

    3b72bcf5bc2606c6a65277b8689d9b60a750c35d40bce11ffd99179ad8c6143a488c70801f7363f3b81235e60d2ab5865face67c22e1a780be6b47b8ead0ebe2

  • SSDEEP

    49152:3WsXBW4eRplipzHnRdb5Njt5qX2Ap3EHzNUd09KThjS55YmEZCW9sP0JQD:GsXPmW5HnbjbqXdp6zNYmcSyF00J+

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 38e59da7bfa1f9567e9968dc2c9486b1.bin
    .zip

    Password: infected

  • a7ac6782f2b00dfd09d2dd7265289e46e0ed2692fd59788384475a87c2e8c3b3.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections