General

  • Target

    70668201bc66dfcb614024a2f41cd41fc8c69266dfcabfeb01544910b656b2b4.zip.zip

  • Size

    10.9MB

  • MD5

    a70477a4e4f26710d76312eace8953e3

  • SHA1

    e4312e0f523b0999ed60a51a082294e14c2d4da9

  • SHA256

    8a49518b1a913a83f0b7c60195f013a6ba1f79c0ae95da5b21e374f4b7ba0e57

  • SHA512

    ad4b191ef3fe11b4cdcc98ec038394866dfe269ee7edb2d5f685889928e1c4efd796abc648de8cf6cc0a529aae33711c86713321325380334e05e8a97d910cd8

  • SSDEEP

    196608:hd35Oh/h8OJSwKF/vIOn+E1rPGbpK6Ky++UaCCqRgGDDDjeiQFoV8Xg+0k:hd35Oh54R1vIOnP1LG/y+pjWa+8Xd

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • 70668201bc66dfcb614024a2f41cd41fc8c69266dfcabfeb01544910b656b2b4.zip.zip
    .zip

    Password: infected

  • 70668201bc66dfcb614024a2f41cd41fc8c69266dfcabfeb01544910b656b2b4.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    e3f6c4dde335a74bb4a5e1b745fa0f1b


    Headers

    Imports

    Sections

  • BINDInstall.ilk
  • BINDInstall.pdb
  • SHA256
  • bindevt.dll
    .dll windows:4 windows x86

    e127c32a095c182d34e4297729a231be


    Headers

    Imports

    Sections

  • bindevt.ilk
  • bindevt.pdb
  • dig.exe
    .exe windows:4 windows x86

    8d6de78c54b366de0e6e3d43c1101f19


    Headers

    Imports

    Sections

  • dig.ilk
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    62cb0570df6c0862d3509efb4e05304f


    Headers

    Imports

    Sections

  • dnssec-keygen.ilk
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    cf17eca1ab63546b54ec8441f73ba92e


    Headers

    Imports

    Sections

  • dnssec-signzone.ilk
  • host.exe
    .exe windows:4 windows x86

    2c7b804d05d3695c7606cb12a262be57


    Headers

    Imports

    Sections

  • host.ilk
  • libbind9.dll
    .dll windows:4 windows x86

    1f836d33bf4dc8431745a1d098f1f1ff


    Headers

    Imports

    Exports

    Sections

  • libbind9.ilk
  • libdns.dll
    .dll windows:4 windows x86

    60222b7b9a60c160063035165c59b004


    Headers

    Imports

    Exports

    Sections

  • libdns.ilk
  • libeay32.dll
    .dll windows:4 windows x86

    a73684f271402d6f476aece2b0212b05


    Headers

    Imports

    Exports

    Sections

  • libisc.dll
    .dll windows:4 windows x86

    7001d67cd8c8cff3feeb86ff195f8a4e


    Headers

    Imports

    Exports

    Sections

  • libisc.ilk
  • libisccc.dll
    .dll windows:4 windows x86

    84e3dea07d516af1909689df013055de


    Headers

    Imports

    Exports

    Sections

  • libisccc.ilk
  • libisccfg.dll
    .dll windows:4 windows x86

    d55998e0b2f96cc6eb5ee046c9fecf9b


    Headers

    Imports

    Exports

    Sections

  • libisccfg.ilk
  • liblwres.dll
    .dll windows:4 windows x86

    e2ad6d152fdd81eeef3c36eaf02842e8


    Headers

    Imports

    Exports

    Sections

  • liblwres.ilk
  • named-checkconf.exe
    .exe windows:4 windows x86

    4c4b79f7ef1670418381990a5c6ae714


    Headers

    Imports

    Sections

  • named-checkconf.ilk
  • named-checkzone.exe
    .exe windows:4 windows x86

    2ba4344e69bf0e097b040f6fdad991fe


    Headers

    Imports

    Sections

  • named-checkzone.ilk
  • named-compilezone.exe
    .exe windows:4 windows x86

    2ba4344e69bf0e097b040f6fdad991fe


    Headers

    Imports

    Sections

  • named-compilezone.ilk
  • named.exe
    .exe windows:4 windows x86

    10e9f03482e7d1b5fe52868b5104c896


    Headers

    Imports

    Sections

  • named.ilk
  • nslookup.exe
    .exe windows:4 windows x86

    db9fab1c4f292d1419a786d5b7428748


    Headers

    Imports

    Sections

  • nslookup.ilk
  • nsupdate.exe
    .exe windows:4 windows x86

    3dc2d070b6afd8740490eebd1c4a6ea1


    Headers

    Imports

    Sections

  • nsupdate.ilk
  • rndc-confgen.exe
    .exe windows:4 windows x86

    419a731735bcefbc53f673612ffeb35e


    Headers

    Imports

    Sections

  • rndc-confgen.ilk
  • rndc.exe
    .exe windows:4 windows x86

    cc96837f3a6ce6fcb118abe6b7124af6


    Headers

    Imports

    Sections

  • rndc.ilk
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Code Sign

    Headers

    Imports

    Sections