General

  • Target

    785607a320f7338a45583ba5a4351cfc.bin

  • Size

    2.4MB

  • MD5

    f3c76bcead1831ff095b113a0cfe4aac

  • SHA1

    f9187c62eb2abfb82a89c525f1595cc13a1b895f

  • SHA256

    557c665f347b5b329b2143090a260da91341dd87bbd989b33e79bd7d7367b331

  • SHA512

    dcec1c5ca5dc16b8814e20696c3f397db179d1a7665f4e7d82e19bd01574b71fc3944e104bdbfc39296c70e1b68dd27efe0012bc5fc5bae5c986725872984624

  • SSDEEP

    49152:2RUQyGPuvi9PBYj+A7Aol7QvwIQ1icbopF9WmV1PSDMJ1/Fn9UvAuqV+Pz:26QaCPBy97AmQvwr1ippFlbaDMfLIr

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 785607a320f7338a45583ba5a4351cfc.bin
    .zip

    Password: infected

  • 1353ef9da4acb986188b6aae8930ecd1618afc282c4f9d6a85b7f07412d93efd.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections