General

  • Target

    a1d4782417480660db2ba6a327755b76.bin

  • Size

    595KB

  • MD5

    5ed1c0ffad8d5ac0b693e9c4dfe1199a

  • SHA1

    35d2fc0e58a169aae92ce0eb71c82f6df436df7d

  • SHA256

    00f28547cae0aeaa60d23e5440f849687d7c7a21e9410b86717d3a9f19f8b0f9

  • SHA512

    d4841227780e080a15710b3c80b74f18d614bb63c52cff56704dfb2919b31479adc3ada1278218d04bfa87861c7b815c3cfe47df32d8278e831bb2f30295ec4e

  • SSDEEP

    12288:VW9i/bfDKRppMvqZ6TpEhRFyhGhxyC2gVF/csOtU:VW9srD8pMSZRFyUhxyCBFcBa

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a1d4782417480660db2ba6a327755b76.bin
    .zip

    Password: infected

  • b92b26104f6813dbaccc15c7595e2cfb3f25a4206aa1b7957bbeac03d5958ef8.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections