General

  • Target

    23576ccefd0eb38416b9bc6466c3bceec0e265392422c08777cf52d93bedae52.zip.zip

  • Size

    10.7MB

  • MD5

    49d9ca2cf6d0b4d23b7a68aeb1e2f0ad

  • SHA1

    8a8624a369caeed7e5e9f7c31a87c5edc9ebd648

  • SHA256

    1dbbb74f042bd90b4d0839757f034f1b99ba9874392547e4f774f9484c5d22ff

  • SHA512

    005c8ec8068c19453a4120b450c967da18e8a4ab53470cf22c0cb51a95db07d19f7d53ac180055d40d4953666c82f04a0f1e95a3b05f26846c7e888128d5959d

  • SSDEEP

    196608:6NRH+7LWCs+3ZYrQ+0/az9TCkUz6cW2bV+bZX0bo5WDXrinufdsS8asTkoO8jyL6:6j+Ou3iB0/aBTCnz652wX0bo54XrNfdS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • 23576ccefd0eb38416b9bc6466c3bceec0e265392422c08777cf52d93bedae52.zip.zip
    .zip

    Password: infected

  • 23576ccefd0eb38416b9bc6466c3bceec0e265392422c08777cf52d93bedae52.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    9ca9354faf5c6f540eef0c910db988c9


    Headers

    Imports

    Sections

  • BINDInstall.ilk
  • BINDInstall.pdb
  • SHA256
  • bindevt.dll
    .dll windows:4 windows x86

    1a433fe8295417eadfb47b95d92b1de7


    Headers

    Imports

    Sections

  • bindevt.ilk
  • bindevt.pdb
  • dig.exe
    .exe windows:4 windows x86

    df17b1b699fab63a49c52e9535b7dc95


    Headers

    Imports

    Sections

  • dig.ilk
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    5ef0076c6110c5ac870f34e66307059a


    Headers

    Imports

    Sections

  • dnssec-keygen.ilk
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    49585ae40acc13b30d9b6440d09fd8c8


    Headers

    Imports

    Sections

  • dnssec-signzone.ilk
  • host.exe
    .exe windows:4 windows x86

    25f5492278d5a11de1f86ce835d00b61


    Headers

    Imports

    Sections

  • host.ilk
  • libbind9.dll
    .dll windows:4 windows x86

    be17558037843c9114106a27b3e3c3ac


    Headers

    Imports

    Exports

    Sections

  • libbind9.ilk
  • libdns.dll
    .dll windows:4 windows x86

    387e6cd91d26fdaa8fdc31f53f8384b0


    Headers

    Imports

    Exports

    Sections

  • libdns.ilk
  • libeay32.dll
    .dll windows:4 windows x86

    dec26f4c2a7b87a79ef3220b59556813


    Headers

    Imports

    Exports

    Sections

  • libisc.dll
    .dll windows:4 windows x86

    f112c19ecb5bfea3c13061cfc3953fbc


    Headers

    Imports

    Exports

    Sections

  • libisc.ilk
  • libisccc.dll
    .dll windows:4 windows x86

    d9673a00a097b7da4755d59800b1e985


    Headers

    Imports

    Exports

    Sections

  • libisccc.ilk
  • libisccfg.dll
    .dll windows:4 windows x86

    b492589c7a21fb4b2545010bd26507e8


    Headers

    Imports

    Exports

    Sections

  • libisccfg.ilk
  • liblwres.dll
    .dll windows:4 windows x86

    f90c73c8128819f18eb2946d1a5c9281


    Headers

    Imports

    Exports

    Sections

  • liblwres.ilk
  • named-checkconf.exe
    .exe windows:4 windows x86

    feb9b049dff76b297506e14ce1fa97b2


    Headers

    Imports

    Sections

  • named-checkconf.ilk
  • named-checkzone.exe
    .exe windows:4 windows x86

    739fb33e860ec7e09962e4cf240c74de


    Headers

    Imports

    Sections

  • named-checkzone.ilk
  • named.exe
    .exe windows:4 windows x86

    19841c9dd90674151385f32a658918c5


    Headers

    Imports

    Sections

  • named.ilk
  • nslookup.exe
    .exe windows:4 windows x86

    c797d24ea3479f30664e936c97460d08


    Headers

    Imports

    Sections

  • nslookup.ilk
  • nsupdate.exe
    .exe windows:4 windows x86

    7a97fac127bd0e9ef256248f4af27d1f


    Headers

    Imports

    Sections

  • nsupdate.ilk
  • rndc-confgen.exe
    .exe windows:4 windows x86

    cba5e5c3d1c858d733283482ee8120a9


    Headers

    Imports

    Sections

  • rndc-confgen.ilk
  • rndc.exe
    .exe windows:4 windows x86

    e95cd7164e72964826fedde8d611bbf6


    Headers

    Imports

    Sections

  • rndc.ilk
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Headers

    Imports

    Sections