Overview

overview

10

Static

static

10

dd286a4d79...76.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd286a4d79d0f4c2b906073c7f46680252ca09c1c39b0dc12c92097c56662876.zip

  • Size

    1.8MB

  • MD5

    baafe4e67ea321abb34d8352753da9a8

  • SHA1

    d31054b45f730b04d10d6a9039d953c644a46b8b

  • SHA256

    0eb47cce8acbc742dd9d8e73a3c48411c13bdb03d99dfbeafe1ddcb453626f8f

  • SHA512

    5e7dfbac78ff5b9d07b6041369344281338d29d381fef2b87d20c7e529197a499a963186ede6be32f8b85e9b0211b679d1e82c6062c5cd99965b3c4be263c9ca

  • SSDEEP

    49152:2pkNNaOIXJ73QovIdJUfBLe5OeGGKth1Dm0euudWGca:/jo5739m1ktfD2u4ca

Score
10/10
upxzebrocy

Malware Config

Extracted

Family

zebrocy

C2

Windows XP Professional x64 Edition

Signatures

  • Zebrocy Go Variant 1 IoCs
  • Zebrocy family
    zebrocy
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • dd286a4d79d0f4c2b906073c7f46680252ca09c1c39b0dc12c92097c56662876.zip
    .zip

    Password: infected

  • dd286a4d79d0f4c2b906073c7f46680252ca09c1c39b0dc12c92097c56662876.exe
    .exe windows x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections