General

  • Target

    Loader1.32 (1256).rar

  • Size

    4.6MB

  • MD5

    3d5e08736ed82b6ef6aec17113875836

  • SHA1

    effbefe7e7904b0e98fae6232f53537592d45d1e

  • SHA256

    fcd8e84fb1df1030e5209f57e522bc13b634e57ee0473c075ab19649bdb59cd5

  • SHA512

    f136422bcc2928c5dde48681646ce7cc1ee1429cdb7774c67e45a3cd756f92c2d4ec834fb67a1912db6a5f1199475116b3324e680952e57f4c958cb46f2f190d

  • SSDEEP

    98304:87LT3IdmHGZnoPXbo7Ny7LvjB9f958mysd5hgNW0IgDqqcgoDXOBaJlW:W3IdmGoPAgjjB9f95vyWh8tGL5DDu

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Loader1.32 (1256).rar
    .rar

    Password: 1256

  • loader/Client_86.dll
    .dll windows:6 windows x86 arch:x86

    Password: 1256

    618534ac24edd2e1f481ea317f8dc151


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • loader/NewLoaderCracks_1.32.exe
    .exe windows:5 windows x86 arch:x86

    Password: 1256

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections

  • loader/clientcrack.dll
    .dll windows:5 windows x86 arch:x86

    Password: 1256

    e2ff03f39a17979bf251491b2fad0099


    Headers

    Imports

    Exports

    Sections

  • loader/controller.dll
    .dll windows:6 windows x86 arch:x86

    Password: 1256

    87452d09bda47f5f2f72d0933806cddb


    Headers

    Imports

    Exports

    Sections

  • loader/dllfiles.dll
    .dll windows:10 windows x86 arch:x86

    Password: 1256

    185ce3a45c3a9cfb3bf83afd7f79c140


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • loader/extreme.bin
  • loader/injector.bin
  • loader/yupartner.blk