General

  • Target

    fb027065b10cd311473a1a7e5aa24005.bin

  • Size

    993KB

  • MD5

    a3bca3fd17591a3d40d9ed245017f531

  • SHA1

    9969abbd36148b772b1f6c1cc960e9750f2d2af6

  • SHA256

    8fa01a318cce794c99a6891b2c5f9fdd76f29d9bd079e5425353c6fd22e019dd

  • SHA512

    e5e593a430e7a44622a657b447bac87f24cea9efa67f1b05327e37a21c6e07a07e7e8ee0f4da191465db5aab739ecee910f9715e69cf5d1fd90121eccc53d052

  • SSDEEP

    24576:z7rr5iA4f64hEXjn50hrmfGRPV15j9TZ9W4pNVK9TwhtLHDepAL:905EXN0kfGv+YtLDepAL

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fb027065b10cd311473a1a7e5aa24005.bin
    .zip

    Password: infected

  • 4151805091b50f779143ce5b0782bbcfcbd9e471c81f6ab644f4e45dd064e2ec.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections