Overview

overview

10

Static

static

10

Zeppelinbg...xe.exe

windows7-x64

10

Zeppelinbg...xe.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Zeppelinbggaehbcdj18_browsingExe.exe

  • Size

    100KB

  • MD5

    cf5a358a22326f09fd55983bb812b7d8

  • SHA1

    1addcffae4fd4211ea24202783c2ffad6771aa34

  • SHA256

    dd89d939c941a53d6188232288a3bd73ba9baf0b4ca6bf6ccca697d9ee42533f

  • SHA512

    5e4129009c716286c9a2d85f846c75053d71251c9ab52f440da5a3f1a5cc6d9d7d795753bc7e37ef11353fb694f1c0991d127c28d6cd1188316623aa57cb2e5b

  • SSDEEP

    3072:ge2IWDaNiBBXtw4KLStagKwbzCcO8WWZ5:kIeoiBBXGLSYgZzCx8Wq5

Score
10/10
upxzeppelin

Malware Config

Signatures

  • Detects Zeppelin payload 1 IoCs
  • Zeppelin family
    zeppelin
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Zeppelinbggaehbcdj18_browsingExe.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections