General

  • Target

    08e95dabb86201eeb98188769e4fcd62.bin

  • Size

    595KB

  • MD5

    ad6a783f5d1757053b5f2dbcd7551009

  • SHA1

    3ce91efa36f6ced728c1955a7ffbfdf3cc8f96c2

  • SHA256

    874a2c7f2a2f39efe570bde5a76a28199fc8a063281b75d6d59a5f1b044ccc84

  • SHA512

    efe024747013f52885e5e1951983724bd65f31780bd61b615a029de35c0f14a3b092260ab50bf5a9f50f5960ffced42158df4cd71c5fbb199068bab5bc170e65

  • SSDEEP

    12288:PHASc+yWfwD3cEdrbTsZBNNQaN35hY3uDbjelG13WSFVreXe0:vAS3yMW3vgBNN+enylO3WSFVreXd

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08e95dabb86201eeb98188769e4fcd62.bin
    .zip

    Password: infected

  • 9bf9efa06f63a21c9893e1acfa2ae7838ab3bdcb7d768ef6304756845395bfb7.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections