General

  • Target

    Neverlose.rar

  • Size

    2.0MB

  • MD5

    722db6635fa7aafd05fab9000272d49b

  • SHA1

    b9ecc26a64d76f672f44d4d39fe31871786ad590

  • SHA256

    19348fd43d70e3dd8effb8431e75f566ec33875889e7a4bacf08535b6667b259

  • SHA512

    f90bcbfa5d34303bde2b84b95b0af5a22ca64a02c8e05c05ff1f5a85f8a5927858b07d9ca039e5e14b5141d5bf2988711ffd37da776f242449961c2bde636b1e

  • SSDEEP

    49152:mnhi9eCBG1sfAO7cD9counMZguk1zXQ4zdKvDnd5NEoQQxFRls:mA9CDmIRIA4z2DnLeoQQzc

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Neverlose.rar
    .rar
  • Neverlose.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections