Resubmissions

23-01-2025 15:47

250123-s8nvfavjhw 10

23-01-2025 15:44

250123-s6ya4awkgr 10

23-01-2025 15:43

250123-s6b3vswkfl 10

General

  • Target

    123.rar

  • Size

    627KB

  • MD5

    92ec0c734bf81f19627f068b8b1ec529

  • SHA1

    8cb79b342760c841addc21e5bdaa4beba4148942

  • SHA256

    dfe9f39426e9f5c49dfd52ec6dcf91a679af24d2e5a6119a139b9bdf1525655d

  • SHA512

    754f39ae79ef974fe55c6b1768ec322c8a898f9b8993281952d82bbd3dff85ebb60d8d8a9b64163ca5d9f4177c5fd54f9e42b9bb889b73d6b118b44913c6a619

  • SSDEEP

    12288:DfMyzcrZC15Hn80554N7/ALQAp0fDAUOC/WBi9lsGm15d73dXlhw:DfHzIW53gTAMDAUdf96GA5dDd1m

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 123.rar
    .rar
  • taskhostw.exe
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections