Overview

overview

7

Static

static

7

avz4/avz.exe

windows7-x64

7

avz4/avz.exe

windows10-2004-x64

7

avz4/avz.url

windows7-x64

6

avz4/avz.url

windows10-2004-x64

3

avz4/avz_en.chm

windows7-x64

1

avz4/avz_en.chm

windows10-2004-x64

1

avz4/avz_ru.chm

windows7-x64

1

avz4/avz_ru.chm

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a7e935ab86aebcf9f16496055a490f9f58f1ef76761aa0366420f49b209d9c6e.zip.zip

  • Size

    9.6MB

  • MD5

    5b03050cf0ec2a8a8ea41c78414167b4

  • SHA1

    5e8b994f81a7554d3e28e5300b48ffdb668dc502

  • SHA256

    afdc657e1320da4760625216f4bb9c9f61e308ac8420f551832e9fcd33f0be74

  • SHA512

    9c5c8785db01eae76a2633ea896661c6f4c3ccb70f84973ac4394659fe94706c5d1f58bdde68c5e451a6c5d1b2540931e6fe380a04a6c455a4c7707175cb7c64

  • SSDEEP

    196608:8bpjoH4i22YRsY1GSxreEPy/E79GGQXeto17J1INAn1DnxTWsXKpD2rE6wjq2c:UpfiSRsavdfDtoOAn1Is6pD2r8jqB

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a7e935ab86aebcf9f16496055a490f9f58f1ef76761aa0366420f49b209d9c6e.zip.zip
    .zip

    Password: infected

  • a7e935ab86aebcf9f16496055a490f9f58f1ef76761aa0366420f49b209d9c6e.zip
    .zip
  • avz4/Base/backup.avz
  • avz4/Base/bt.avz
  • avz4/Base/esc.avz
  • avz4/Base/exc.avz
  • avz4/Base/extract.avz
  • avz4/Base/keylogger.avz
  • avz4/Base/krnldrv.avz
  • avz4/Base/lang_en.avz
  • avz4/Base/lang_ru.avz
  • avz4/Base/main.avz
  • avz4/Base/main001.avz
  • avz4/Base/main002.avz
  • avz4/Base/main003.avz
  • avz4/Base/main004.avz
  • avz4/Base/main005.avz
  • avz4/Base/main006.avz
  • avz4/Base/main007.avz
  • avz4/Base/main008.avz
  • avz4/Base/main009.avz
  • avz4/Base/main010.avz
  • avz4/Base/main011.avz
  • avz4/Base/main012.avz
  • avz4/Base/main013.avz
  • avz4/Base/main014.avz
  • avz4/Base/main015.avz
  • avz4/Base/main016.avz
  • avz4/Base/main017.avz
  • avz4/Base/main018.avz
  • avz4/Base/main019.avz
  • avz4/Base/main020.avz
  • avz4/Base/main021.avz
  • avz4/Base/main022.avz
  • avz4/Base/main023.avz
  • avz4/Base/main024.avz
  • avz4/Base/main025.avz
  • avz4/Base/main026.avz
  • avz4/Base/main027.avz
  • avz4/Base/main028.avz
  • avz4/Base/main029.avz
  • avz4/Base/net.avz
  • avz4/Base/neural.avz
  • avz4/Base/neurald.avz
  • avz4/Base/neurale.avz
  • avz4/Base/neuralm.avz
  • avz4/Base/par.avz
  • avz4/Base/ports.avz
  • avz4/Base/prt.avz
  • avz4/Base/repair.avz
  • avz4/Base/rootkit.avz
  • avz4/Base/scripts.avz
  • avz4/Base/scu.avz
  • avz4/Base/signf001.avz
  • avz4/Base/signf002.avz
  • avz4/Base/signf003.avz
  • avz4/Base/signf004.avz
  • avz4/Base/signf005.avz
  • avz4/Base/signf006.avz
  • avz4/Base/signf007.avz
  • avz4/Base/signf008.avz
  • avz4/Base/signf009.avz
  • avz4/Base/signfusr.avz
  • avz4/Base/syscheck.avz
  • avz4/Base/sysipu.avz
  • avz4/Base/tsw-auto.avz
  • avz4/Base/tsw.avz
  • avz4/Base/update.avz
  • avz4/Base/vse_ru.avz
  • avz4/avz.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections

  • avz4/avz.url
    .url
  • avz4/avz_en.chm
    .chm
  • avz4/avz_ru.chm
    .chm
  • avz4/version.txt