General

  • Target

    loader (2024).zip

  • Size

    8.5MB

  • MD5

    ad6cb67cd043b5d2a15ce3472435b49f

  • SHA1

    b99eb24afa99eb474fc1a030be9f1c0c14656898

  • SHA256

    3ea4bc894bf2bf2377b9ef333052eaa71ecbabbac64f6ff5bf914ea475a6da14

  • SHA512

    da120e203b7cc6d75fca3273eb8e7e3a1b0159f3edcb4dc101070733f487ea05db91f0d2d151b8ae126bfe487e452cdaeda07e53b77bd066c4baa2d56c10b1a5

  • SSDEEP

    196608:uxlOAFxooc2TSaov9nzvKZcLV0gdh8rzPiiV1KAKL2k8YH:uxIAF7LT4zvKZc9dRLAKL2QH

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • loader (2024).zip
    .rar

    Password: 2024

  • loader/cheat.dll
    .dll windows:6 windows x64 arch:x64

    Password: 2024

    50eb2533481984ae8143bde6c1a13f6d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • loader/crack.dll
    .dll windows:6 windows x64 arch:x64

    Password: 2024

    f538d409c1132f6940564e44db5e4622


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • loader/icuuc.dll
    .dll windows:5 windows x64 arch:x64

    Password: 2024

    babd503407c6dd603dd0aec6407ecb71


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • loader/inputsystem.dll
    .dll windows:6 windows x64 arch:x64

    Password: 2024

    99cc74337e572e012af50288e3e96d13


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • loader/key.txt
  • loader/libavcodec-58.dll
    .dll windows:6 windows x64 arch:x64

    Password: 2024

    8e54dbe27749bb593c9034f453591dac


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • loader/libavutil-56.dll
    .dll windows:6 windows x64 arch:x64

    Password: 2024

    d0938fdbfa75c053ab8d526a1cb4b351


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • loader/libfbxsdk_2020_3_1.dll
    .dll windows:6 windows x64 arch:x64

    Password: 2024

    238af6d8d9533a76c2ff6d64c73f5cd8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • loader/libfontconfig-1.dll
    .dll windows:5 windows x64 arch:x64

    Password: 2024

    678c469138cf230d4824b94bbc762b4c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • loader/loader.dll
    .dll windows:5 windows x64 arch:x64

    680f199705829e43ca17613c6414c4e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • loader/loader.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections