General

  • Target

    dbe2b638081f587906ca304747fb960f.bin

  • Size

    616KB

  • MD5

    eb0563fd92570591750e249127af6658

  • SHA1

    79ddd3bb6ad747a123544fd67ecc8408600faf76

  • SHA256

    78ddede18e7b0a972fe3632349a5fa2a70ad7f0974fac528a4bed46fc815f3db

  • SHA512

    80e19432382324096c44ccb00d350ffb0a3ebfd23a4581e7d70a2925948bd6c6ee316949c873cb2ad2310b79bf651b51c76b681ba7ef4bd2273237142212a311

  • SSDEEP

    12288:c7jO0LW+HysqFIdaEYNy4mb2vou7fDHGq+Ykb8pSEJH9NoLnt3:cvO6W1sqmrWi2Q6KqpdpnH9N4nt3

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dbe2b638081f587906ca304747fb960f.bin
    .zip

    Password: infected

  • 9e4ab64a5660c70ca5812c807ddfb850ce294e1049977bb758cb12ef9385ec34.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections