General

  • Target

    3d86002bbb4e4ba726ec2dbb2e78e5fe.zip

  • Size

    734KB

  • MD5

    b623e3dc6887d2900472ad018d04ec7c

  • SHA1

    2b5fc87f0e0906066ec39b094a63703d2c3c9b85

  • SHA256

    a219e634fe412244bebc4f46e8359207453700883170fbb5f9f6363ffcc3ca38

  • SHA512

    3c04e7af0adf784c4963428503bb3bd626e2f0d4f7e424eeb5a0534a746d92acc52506a0815ff474c2541c699dce69bc3c4e40a0750e4df849cc90d861cec09f

  • SSDEEP

    12288:34X8Rww6wplElm4RVj8GSo+8ldiaAedFUCqFJ0mOkqCuN7rV4pldKVZwvgzqrgu:Cw6Wd4RVjOmX7dF5mQ5N7xkGQvgLu

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d86002bbb4e4ba726ec2dbb2e78e5fe.zip
    .zip

    Password: infected

  • 480ebda85f8138004705b1ccf0c25553b0bff18607d23147000b2dbb9aebe7c9
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections