General

  • Target

    2c03dd0e127867ade0480bf34520df59.bin

  • Size

    594KB

  • MD5

    22116a0d8e8702b0e1253eab24086a1f

  • SHA1

    bf791a7864186c5fe96fa04ac662b5b6c1d66c1e

  • SHA256

    7f6a59c8f6c9d93ee497a2f21eb718ccbe5075755dd3400d48b68491d56691f9

  • SHA512

    ef8deb1db81344e2e9b7bbf70e2d52143f1a31bb3535498d1c1c2e4c32a7dcaceddcb4d0bf22430259e984f8975f90ebb0578d78f51eee9725af35194769a240

  • SSDEEP

    12288:Fvf/m7vBBdRJZglWN6PXSn1lc/tX4MkngDPblIpxOM3SFpw7o6F8sQ4s:FvWBdRJZJaK1KlX4LgDTlwxlSFpwM6FW

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2c03dd0e127867ade0480bf34520df59.bin
    .zip

    Password: infected

  • fad9c2f147e0559c2f483f0643c01a0120710b07b15e9c9773d6eab00f15e289.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections