General

  • Target

    DCRat by twink.rar

  • Size

    65.7MB

  • MD5

    7ad1bcdb2ff039dc3cbe930399139ee0

  • SHA1

    245aedcd44b3232bbbb256cd8460f21defd08812

  • SHA256

    ec6fe2eb9acb30e46bbbabe066b1bffebe3de67550945a3611a98f6294092d65

  • SHA512

    7e9b0a608bc35919be9d3773043fc8e7a99ee297ba09f57f3f3cfcd228656566ec67b58039756b5b50a97003f10e050f04ace372cef6e47f3d1589545dc257ad

  • SSDEEP

    1572864:FfPpRx+EXB5dRvEmys1yzjxBQg2gEhYzzz2zT0eZP:FfxRAQ5D1UBQgp40e5

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DCRat by twink.rar
    .rar
  • DCRat by kriptonhosting/123.bat
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections