General

  • Target

    Nursultancrack (1234).zip

  • Size

    571KB

  • MD5

    373ba6f08555ee10a390fbf08de356f7

  • SHA1

    01d36658bb5dd1ff9f4580d988ca8a00a9e71306

  • SHA256

    9f746ed6aa449f3dc25209a9689c7426e001a52f8353bed2a5e9ff0a5c6c1d28

  • SHA512

    a8befa74fcd9eaea44f57681f40ca774163bfb72cde00e4d9104cf7d20901b9225a50d81a73b6d56054ee0bb7c39488b37ba7a0715c41379a7114f51172046d0

  • SSDEEP

    12288:7A727vPiWwQ7F0kXf67gPaJaoz3GO/KQyG2XEUmK:U7miWAW67gPaUelhK

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nursultancrack (1234).zip
    .zip

    Password: 1234

  • Nursultancrack.exe
    .exe windows:5 windows x86 arch:x86

    Password: 1234

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections