General

  • Target

    aee5b7fb7a31034bc9657d183070ac20a8b63e6493075a94fb059e23c6b91679.zip.zip

  • Size

    12.1MB

  • MD5

    807cf2e920dd70dda56d13f81fd1e405

  • SHA1

    31d6cd67bf1517e6668ee12e44d96b17cf581f15

  • SHA256

    2e2d012feb991bf96abf5720ee41527370d0b08f94a80cea4e0130c9d2ebeb0c

  • SHA512

    c05beaed2af5cccd72ceea3c878a959eaaf1956c6dd5983dc152a298789db24f48e64be6fe9a903e03fee50f8a1acf38dfaba6c3c6ad03453a50619ea90226b0

  • SSDEEP

    393216:olG+Ngj34ttP//noG7UABMA709cRpyJH4:o8+P33/nv4Ap8cREJH4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 30 IoCs

    Checks for missing Authenticode signature.

Files

  • aee5b7fb7a31034bc9657d183070ac20a8b63e6493075a94fb059e23c6b91679.zip.zip
    .zip

    Password: infected

  • aee5b7fb7a31034bc9657d183070ac20a8b63e6493075a94fb059e23c6b91679.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    e3f6c4dde335a74bb4a5e1b745fa0f1b


    Headers

    Imports

    Sections

  • BINDInstall.ilk
  • BINDInstall.pdb
  • SHA256
  • bindevt.dll
    .dll windows:4 windows x86

    e127c32a095c182d34e4297729a231be


    Headers

    Imports

    Sections

  • bindevt.ilk
  • bindevt.pdb
  • ddns-confgen.exe
    .exe windows:4 windows x86

    c85b400a388cde50cd9f4ecf79a285e3


    Headers

    Imports

    Sections

  • ddns-confgen.ilk
  • dig.exe
    .exe windows:4 windows x86

    b569429960f1fddad6a6ac3e34349fa4


    Headers

    Imports

    Sections

  • dig.ilk
  • dnssec-dsfromkey.exe
    .exe windows:4 windows x86

    f58d6216f9a62b09ccdaa4c5304b5d29


    Headers

    Imports

    Sections

  • dnssec-dsfromkey.ilk
  • dnssec-keyfromlabel.exe
    .exe windows:4 windows x86

    6806e14eb35ba412a12577615be51027


    Headers

    Imports

    Sections

  • dnssec-keyfromlabel.ilk
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    8bea0552e93c85aed15d1ad3de598557


    Headers

    Imports

    Sections

  • dnssec-keygen.ilk
  • dnssec-revoke.exe
    .exe windows:4 windows x86

    ecab55baf2e45016081cc7afecfa3958


    Headers

    Imports

    Sections

  • dnssec-revoke.ilk
  • dnssec-settime.exe
    .exe windows:4 windows x86

    b71be3f8e8dc8aa4b9b154a515bad6f6


    Headers

    Imports

    Sections

  • dnssec-settime.ilk
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    b9d80faf15f20d0d9f76a66775409486


    Headers

    Imports

    Sections

  • dnssec-signzone.ilk
  • host.exe
    .exe windows:4 windows x86

    44835a39adf279430e17ff118be23448


    Headers

    Imports

    Sections

  • host.ilk
  • libbind9.dll
    .dll windows:4 windows x86

    d0e8e78bbe0f7efbfecf4055c399f99b


    Headers

    Imports

    Exports

    Sections

  • libbind9.ilk
  • libdns.dll
    .dll windows:4 windows x86

    8098c086c8722c1223cfca1edc88f12b


    Headers

    Imports

    Exports

    Sections

  • libdns.ilk
  • libeay32.dll
    .dll windows:4 windows x86

    a73684f271402d6f476aece2b0212b05


    Headers

    Imports

    Exports

    Sections

  • libisc.dll
    .dll windows:4 windows x86

    806a12e9dcbfac9aaeda4b2d817e3e62


    Headers

    Imports

    Exports

    Sections

  • libisc.ilk
  • libisccc.dll
    .dll windows:4 windows x86

    ba5b826794f8ba2929377e29c980df5e


    Headers

    Imports

    Exports

    Sections

  • libisccc.ilk
  • libisccfg.dll
    .dll windows:4 windows x86

    21ed18638ae11ca63f4a221902a900c0


    Headers

    Imports

    Exports

    Sections

  • libisccfg.ilk
  • liblwres.dll
    .dll windows:4 windows x86

    e2ad6d152fdd81eeef3c36eaf02842e8


    Headers

    Imports

    Exports

    Sections

  • liblwres.ilk
  • libxml2.dll
    .dll windows:4 windows x86

    466104099f7246f04745eb23e99c006e


    Headers

    Imports

    Exports

    Sections

  • named-checkconf.exe
    .exe windows:4 windows x86

    fe34e714336e6303abe221bbbddfc2eb


    Headers

    Imports

    Sections

  • named-checkconf.ilk
  • named-checkzone.exe
    .exe windows:4 windows x86

    2b7ce88755178b5bfaf2dcc74522fe0e


    Headers

    Imports

    Sections

  • named-checkzone.ilk
  • named-compilezone.exe
    .exe windows:4 windows x86

    2b7ce88755178b5bfaf2dcc74522fe0e


    Headers

    Imports

    Sections

  • named-compilezone.ilk
  • named.exe
    .exe windows:4 windows x86

    22ae888c48d90ce60acb4ed1aa48b9d2


    Headers

    Imports

    Sections

  • named.ilk
  • nslookup.exe
    .exe windows:4 windows x86

    9246e8506a2b6b7618d9da8ecde5212a


    Headers

    Imports

    Sections

  • nslookup.ilk
  • nsupdate.exe
    .exe windows:4 windows x86

    f1581ce5c102cc3d09dba1649dd49b73


    Headers

    Imports

    Sections

  • nsupdate.ilk
  • pkcs11-destroy.exe
    .exe windows:4 windows x86

    ee839d33f8a8c2445b39e52869fe5d05


    Headers

    Imports

    Sections

  • pkcs11-destroy.ilk
  • pkcs11-keygen.exe
    .exe windows:4 windows x86

    3e890ced5e4d7d8beb2d691846e26aca


    Headers

    Imports

    Sections

  • pkcs11-keygen.ilk
  • pkcs11-list.exe
    .exe windows:4 windows x86

    bb30b5f23894b7aed8db361f1e6cadd8


    Headers

    Imports

    Sections

  • pkcs11-list.ilk
  • rndc-confgen.exe
    .exe windows:4 windows x86

    b4ccd6003df1e29f19abd9daa57b63df


    Headers

    Imports

    Sections

  • rndc-confgen.ilk
  • rndc.exe
    .exe windows:4 windows x86

    d29956094ff0315371c1d8c3b1594655


    Headers

    Imports

    Sections

  • rndc.ilk
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Code Sign

    Headers

    Imports

    Sections