Static task
static1
Behavioral task
behavioral1
Sample
cpp/core/misc.vbs
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cpp/core/misc.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
doc/commands.html
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
doc/commands.html
Resource
win10v2004-20230220-en
General
-
Target
private_enzyme_rxmod_04-04-05.rar
-
Size
241KB
-
MD5
e6b2deed37a64d027fd537f4ecc062c3
-
SHA1
b9621e8b4748440a92b5b2ce36edff4af3cebbd4
-
SHA256
007c58e6eb4c45fbdef3ecd8a88633d8e753aef0e9fe0a70bcebe550bed7d3c4
-
SHA512
8f164f96e9163f91a22fd3bce57cc469c343dac16eb5f47b4f9ea4fce07bb1cacf487dd8c0bf817f0ab5013a41769e3aeddc32ca5cb42ce768ae2cd674e48a56
-
SSDEEP
6144:awvOcYrjvP4ekDMwXhLm0o8BzFhXLbfa+98h7TpNYl4lkA6frdc:aw2cg0PrRLm0o8BzFhXvMF70K
Malware Config
Signatures
Files
-
private_enzyme_rxmod_04-04-05.rar.rar
Password: infected
-
config/cfg.h
-
cpp/core/aliaslog.cpp
-
cpp/core/autostart.cpp
-
cpp/core/avirus.cpp
-
cpp/core/crc32.cpp
-
cpp/core/crypt.cpp
-
cpp/core/download.cpp
-
cpp/core/driveinfo.cpp
-
cpp/core/ehandler.cpp
-
cpp/core/fphost.cpp
-
cpp/core/ident.cpp
-
cpp/core/irc_send.cpp
-
cpp/core/loaddlls.cpp
-
cpp/core/misc.cpp.vbs
-
cpp/core/netutils.cpp
-
cpp/core/nzm.cpp
-
cpp/core/peer2peer.cpp
-
cpp/core/processes.cpp
-
cpp/core/random.cpp
-
cpp/core/rndnick.cpp
-
cpp/core/session.cpp
-
cpp/core/shellcode.cpp
-
cpp/core/sysinfo.cpp
-
cpp/core/threads.cpp
-
cpp/core/wildcard.cpp
-
cpp/ddos/ddos.cpp
-
cpp/ddos/icmpflood.cpp
-
cpp/ddos/pingudp.cpp
-
cpp/ddos/supersyn.cpp
-
cpp/ddos/synflood.cpp
-
cpp/ddos/tcpflood.cpp
-
cpp/ddos/tcpflood2.cpp
-
cpp/exploits/clsass.cpp
-
cpp/exploits/dcass.cpp
-
cpp/exploits/dcom.cpp
-
cpp/exploits/lsass.cpp
-
cpp/exploits/lsass1lsass.cpp
-
cpp/exploits/mssql.cpp
-
cpp/exploits/mssqllsass.cpp
-
cpp/exploits/thcsql.cpp
-
cpp/exploits/wkssvc.cpp
-
cpp/modules/capture.cpp
-
cpp/modules/cdkeys.cpp
-
cpp/modules/dcc.cpp
-
cpp/modules/findfile.cpp
-
cpp/modules/findpass.cpp
-
cpp/modules/httpd.cpp
-
cpp/modules/keylogger.cpp
-
cpp/modules/net.cpp
-
cpp/modules/psniff.cpp
-
cpp/modules/redirect.cpp
-
cpp/modules/remotecmd.cpp
-
cpp/modules/rlogind.cpp
-
cpp/modules/secure.cpp
-
cpp/modules/socks4.cpp
-
cpp/modules/visit.cpp
-
cpp/scan/advscan.cpp
-
cpp/scan/scan.cpp
-
cpp/xfer/ftpd.cpp
-
cpp/xfer/tftpd.cpp
-
doc/commands.html.html
-
doc/commands.txt
-
doc/nzm.jpg.jpg
-
headers/advscan.h
-
headers/aliaslog.h
-
headers/autostart.h
-
headers/avirus.h
-
headers/capture.h
-
headers/cdkeys.h
-
headers/clsass.h
-
headers/crc32.h
-
headers/crypt.h
-
headers/dcass.h
-
headers/dcc.h
-
headers/dcom.h
-
headers/ddos.h
-
headers/defines.h
-
headers/download.h
-
headers/driveinfo.h
-
headers/ehandler.h
-
headers/externs.h
-
headers/findfile.h
-
headers/findpass.h
-
headers/fphost.h
-
headers/ftpd.h
-
headers/ftppot.h
-
headers/functions.h
-
headers/globals.h
-
headers/httpd.h
-
headers/icmpflood.h
-
headers/ident.h
-
headers/includes.h
-
headers/irc_send.h
-
headers/keylogger.h
-
headers/loaddlls.h
-
headers/lsass.h
-
headers/lsass1lsass.h
-
headers/misc.h
-
headers/mssql.h
-
headers/mssqllsass.h
-
headers/net.h
-
headers/netutils.h
-
headers/nicklist.h
-
headers/nzm.h
-
headers/passwd.h
-
headers/peer2peer.h
-
headers/pingudp.h
-
headers/processes.h
-
headers/psniff.h
-
headers/random.h
-
headers/redirect.h
-
headers/remotecmd.h
-
headers/rlogind.h
-
headers/rndnick.h
-
headers/scan.h
-
headers/secure.h
-
headers/session.h
-
headers/shares.h
-
headers/shellcode.h
-
headers/socks4.h
-
headers/supersyn.h
-
headers/synflood.h
-
headers/sysinfo.h
-
headers/tcpflood.h
-
headers/tcpflood2.h
-
headers/tcpip.h
-
headers/tftpd.h
-
headers/thcsql.h
-
headers/threads.h
-
headers/visit.h
-
headers/wildcard.h
-
headers/wkssvc.h
-
nzm.dsp
-
nzm.dsw