General

  • Target

    56685241b6f88ad113277edbff88b433.bin

  • Size

    596KB

  • MD5

    b3c57f9614696c84fbd7bad0be5bba83

  • SHA1

    127f0b38ea715593fa0fc5ddde7eb3a0342d8430

  • SHA256

    f2fc0536fd595307eab4678cba45d1f1e464f1691f012e33e502073997ff37d5

  • SHA512

    e9307607f14728ce0f48047a22190141feaa540565dc825d57d71109ef7c012e9fc8010469c953ee65d4b1e8e6cd0eb4005fe0f8d39796055f0e0cf44fd37887

  • SSDEEP

    12288:Ig9tQszwUF+boG3nBzIqMJbeO6wvyzLKFh7Ewi5v9BQIN4b1ghw6CGI:Ig9mzvb/z7M1e/9zLKF1Ewif3N4GHCGI

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 56685241b6f88ad113277edbff88b433.bin
    .zip

    Password: infected

  • 07e897a59a6fe31ad946a6e91cb9a616a5480268a09d22e455dcf39c0c272a3a.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections