Overview

overview

1

Static

static

1

cpp/core/misc.vbs

windows7-x64

1

cpp/core/misc.vbs

windows10-2004-x64

1

doc/commands.html

windows7-x64

1

doc/commands.html

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    prv_nzm-rx.sp2fix.rcast.rar

  • Size

    242KB

  • MD5

    f8929c235aa51ded4f94e32cc778c4e4

  • SHA1

    cd497c86a60a33eadd5f1a510130860fb05e6409

  • SHA256

    7b699aeac9c6f477219905b78b78a92f4fd9816b13b1ba853e421d9b5855ae22

  • SHA512

    2c9aadee3f52193f52c64da8756d6f90618c178d61e6adf2dd060c9ceb328ae0674b05a0906d81dcb88556d1fe13126f252f3a97b01a03cd032983cd03088198

  • SSDEEP

    6144:jG60ZUcsO8VtRs+2X2pDOYFt+aamfa+98h7TpNYlzSvo:7fHVY+2mpDOYFt+rAMF3o

Score
1/10

Malware Config

Signatures

Files

  • prv_nzm-rx.sp2fix.rcast.rar
    .rar

    Password: infected

  • config/cfg.h
  • cpp/core/aliaslog.cpp
  • cpp/core/autostart.cpp
  • cpp/core/avirus.cpp
  • cpp/core/crc32.cpp
  • cpp/core/crypt.cpp
  • cpp/core/download.cpp
  • cpp/core/driveinfo.cpp
  • cpp/core/ehandler.cpp
  • cpp/core/fphost.cpp
  • cpp/core/ident.cpp
  • cpp/core/irc_send.cpp
  • cpp/core/loaddlls.cpp
  • cpp/core/misc.cpp
    .vbs
  • cpp/core/net.cpp
  • cpp/core/netutils.cpp
  • cpp/core/nzm.cpp
  • cpp/core/peer2peer.cpp
  • cpp/core/processes.cpp
  • cpp/core/random.cpp
  • cpp/core/rndnick.cpp
  • cpp/core/session.cpp
  • cpp/core/shellcode.cpp
  • cpp/core/sysinfo.cpp
  • cpp/core/threads.cpp
  • cpp/core/wildcard.cpp
  • cpp/ddos/ddos.cpp
  • cpp/ddos/icmpflood.cpp
  • cpp/ddos/pingudp.cpp
  • cpp/ddos/supersyn.cpp
  • cpp/ddos/synflood.cpp
  • cpp/ddos/tcpflood.cpp
  • cpp/ddos/tcpflood2.cpp
  • cpp/exploits/clsass.cpp
  • cpp/exploits/dcass.cpp
  • cpp/exploits/dcom.cpp
  • cpp/exploits/lsass.cpp
  • cpp/exploits/lsass1lsass.cpp
  • cpp/exploits/mssql.cpp
  • cpp/exploits/mssqllsass.cpp
  • cpp/exploits/realcast.cpp
  • cpp/exploits/wins.cpp
  • cpp/exploits/wkssvc.cpp
  • cpp/modules/capture.cpp
  • cpp/modules/cdkeys.cpp
  • cpp/modules/dcc.cpp
  • cpp/modules/findfile.cpp
  • cpp/modules/findpass.cpp
  • cpp/modules/httpd.cpp
  • cpp/modules/keylogger.cpp
  • cpp/modules/psniff.cpp
  • cpp/modules/redirect.cpp
  • cpp/modules/remotecmd.cpp
  • cpp/modules/secure.cpp
  • cpp/modules/socks4.cpp
  • cpp/modules/visit.cpp
  • cpp/scan/advscan.cpp
  • cpp/scan/scan.cpp
  • cpp/xfer/ftpd.cpp
  • cpp/xfer/tftpd.cpp
  • doc/commands.html
    .html
  • doc/commands.txt
  • doc/nzm.jpg
    .jpg
  • headers/advscan.h
  • headers/aliaslog.h
  • headers/autostart.h
  • headers/avirus.h
  • headers/capture.h
  • headers/cdkeys.h
  • headers/clsass.h
  • headers/crc32.h
  • headers/crypt.h
  • headers/dcass.h
  • headers/dcc.h
  • headers/dcom.h
  • headers/ddos.h
  • headers/defines.h
  • headers/download.h
  • headers/driveinfo.h
  • headers/ehandler.h
  • headers/externs.h
  • headers/findfile.h
  • headers/findpass.h
  • headers/fphost.h
  • headers/ftpd.h
  • headers/ftppot.h
  • headers/functions.h
  • headers/globals.h
  • headers/httpd.h
  • headers/icmpflood.h
  • headers/ident.h
  • headers/includes.h
  • headers/irc_send.h
  • headers/keylogger.h
  • headers/loaddlls.h
  • headers/lsass.h
  • headers/lsass1lsass.h
  • headers/misc.h
  • headers/mssql.h
  • headers/mssqllsass.h
  • headers/net.h
  • headers/netutils.h
  • headers/nicklist.h
  • headers/nzm.h
  • headers/passwd.h
  • headers/peer2peer.h
  • headers/pingudp.h
  • headers/processes.h
  • headers/psniff.h
  • headers/random.h
  • headers/realcast.h
  • headers/redirect.h
  • headers/remotecmd.h
  • headers/rndnick.h
  • headers/scan.h
  • headers/secure.h
  • headers/session.h
  • headers/shares.h
  • headers/shellcode.h
  • headers/socks4.h
  • headers/supersyn.h
  • headers/synflood.h
  • headers/sysinfo.h
  • headers/tcpflood.h
  • headers/tcpflood2.h
  • headers/tcpip.h
  • headers/tftpd.h
  • headers/threads.h
  • headers/visit.h
  • headers/wildcard.h
  • headers/wins.h
  • headers/wkssvc.h
  • nzm.dsp
  • nzm.dsw