General

  • Target

    Proverka.rar

  • Size

    909KB

  • MD5

    be52318896407c65457eebe7c142dd30

  • SHA1

    34e7dacdc21fd82ccab125fca470524db40a49f5

  • SHA256

    4bbe552636afb81ca47cd3a979635231602266932e4c40a75beb01fa7b6556fd

  • SHA512

    e1f3acfe2fd09d93b14617ffcd8d3806ce858a5ae3c7f4da313fc92acd62977594fd28fb78fbc141d808b21f448588f71792b609ec5ee60937fb6d1090d410a6

  • SSDEEP

    12288:lBbbNiWwr9MLbzXJESmA4KBepOiEweWy7CIhl2Bp3kLLndRyWpIq0CmlFbpE+IyG:lRvb7XJx4KBe8wel9X2P3kHSWKVZNIam

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Proverka.rar
    .rar

    Password: 123

  • Proverka by Hiki.exe
    .exe windows:5 windows x86 arch:x86

    Password: 123

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections