General

  • Target

    20b7f5d28ee98e5c43286823ea8cf1e6.bin

  • Size

    960KB

  • MD5

    589ddf75d7a3f3c6c3d6a2844c2c8707

  • SHA1

    adb8c052c1266acf61007f7419498d72d55bbb4d

  • SHA256

    b712e3a5e5db6e7f7d6a629021e2dbecc51871adb0d2a8cad2c5d094f5c1d410

  • SHA512

    b524581fb059a974fa778bd571cd0c33f078f6bb2d238d0047d47f52d6685f7391f1d975e14ee4865f2ff637def3a86e0516c2a1168ec0caab7d0cd885749a09

  • SSDEEP

    24576:oQe7G/jChZyuKbgxA0n4C5/wfbF8yN+LMt3e31HFN9cOd/FJA:skuhL0gWE2fB8yN+LMt3efp/Fq

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 20b7f5d28ee98e5c43286823ea8cf1e6.bin
    .zip

    Password: infected

  • aac41b74838379e24f8b5ca5e704fea42bc06eb158b460dde82e6e3029c14ee7.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections