General

  • Target

    7a193e404a6285a41aba3019479d1749.bin

  • Size

    1.6MB

  • MD5

    993aa525f8c05de0745c37c147c032b3

  • SHA1

    a306aac942be0a75fb86cce6e777afcb40b2faab

  • SHA256

    5b978f244a0939f589b0c90976d6002347a3cc5943bf9389530fb442021137d6

  • SHA512

    ebeec41e4b58b70a567dc4d051e162eebed08586b0fa79c91249f581a1691caf51bb267e2592b79e26662a0637b6a35327a5531b5196da9adaf53adac3467f4c

  • SSDEEP

    49152:ix45521edULppemsrcaIROgIN/2AF77/kKb5:z5g1jtpnsrczOZZFHcKt

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7a193e404a6285a41aba3019479d1749.bin
    .zip

    Password: infected

  • 661b2c9879d7ae68512f820689f2198fdc2d71288ed0a6e747a0ae3f4a27f176.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections