General
-
Target
241223-bqys9atjgv_pw_infected.zip
-
Size
189KB
-
MD5
41ad7770575d4cc3693c474766e94dc5
-
SHA1
3d01860f766d4a32907eb3053c44f0473c050e9e
-
SHA256
ee74fda651ba5f44ead1cb6e3971f9f876b2ffacc49a16cc44ce402067421eb5
-
SHA512
9a744bd4176f5755ea813989bf3386e83bab0b542637558e2a50b1406e74ebdc6e8e03e63a533fcbbcb31054178897c003c110b453e619609a4f1d4817860f96
-
SSDEEP
3072:/IWK9WckPPFt3YkY3LIGuw/NvWzqgTZDrRtZShp2VMVqEpv8cgWc8P8mtv:lckXFg3sGD1vEfRVShoVMMEpvzgZstv
Score
10/10
Malware Config
Signatures
-
DCRat payload 1 IoCs
-
Dcrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
241223-bqys9atjgv_pw_infected.zip
Password: infected
-
80f82098b4ff87c7980403091b1b17bd.bin
Password: infected
-
9d616be0e9388f525e3256467fd034bb7b647e6aca98ca64b46475cf0b2bf623.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections