General

  • Target

    150550df367f8d6334843deee8de66a3.bin

  • Size

    595KB

  • MD5

    fa2616709f24a63e54b943307af012a6

  • SHA1

    7ef9399e3de00581342b5f96325cd57c8733fd5b

  • SHA256

    0ea1a8292aca1e59f3e6ac577ed72e2be6a6ed29ac8f45a702e13add14348776

  • SHA512

    8828adaf7c80d829de0b82f91020f0f4336147fd563dda3f77dd0a59df912e872e5a6a7536e82be35d41c2f2a8635c60d39dc5831fa4f3c962b2049aceb4fe72

  • SSDEEP

    12288:np/j3A0GBt8TfnEsmEjCyZAUdKH1/XYOuWKy3qsdU6ylJP3JgmGKi:n1rAZ8DE+j1Z7dW1w5DMqj6Q3emGKi

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 150550df367f8d6334843deee8de66a3.bin
    .zip

    Password: infected

  • 36fce76e89c0c4e4798956b61abad0e5e28e0732763699ce3c5003518b643496.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections