Resubmissions

21/09/2024, 19:59

240921-yqhhla1apm 10

21/09/2024, 19:56

240921-ynn8cszhpl 10

General

  • Target

    churka.exe

  • Size

    1.4MB

  • MD5

    465a34ec5899d680f5776575a491c2ef

  • SHA1

    1430b46a6cc33a3b577c349138026bfdb263f3fe

  • SHA256

    e0e0b357188a78fa444afb9a90c35cf1a68cf1a49b7579550adc880495254ec7

  • SHA512

    9bcbeaaf6ab3814a4e5016c146046faa72878d0186dd085be599b291e6600b31598f314dab133f2f38e2f9070764c493d8d05ac4704c37534527391a2bdc6eca

  • SSDEEP

    24576:U2G/nvxW3Ww0tKG8FzjFG0H5zU0/EITztngJQxm+4k:UbA30KGGzBG0Lnu+B3

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • churka.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections