General

  • Target

    4bb1b467ea9c9d0f56f6acee97e6e3979b406f00fecf8904b3acca11c74a353e.zip.zip

  • Size

    4.4MB

  • MD5

    07e5a118b86d7861458e685de4c37046

  • SHA1

    18ad4ac60217f5fa0ded8a0e1c64fe7842f6bea6

  • SHA256

    1d3a3490632ab58e53b16aef0944c7178218bcc0cc03fe3bb000ae4ff7e27341

  • SHA512

    c45624a629806cf41d96fcab4f0ac7f15f1964d3cc207169cb0ce244a3f064bf4c7f282bf233442c74d0bdcba498dbde468a2304efbfa2bd19f771ee858038e8

  • SSDEEP

    98304:kDxQ4HZlqUjgc5OIQrfp60CsqjfjZsaadOp3Bo5X78us:qHZlFTOrm1fj2Ip3Bo5Y7

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

Files

  • 4bb1b467ea9c9d0f56f6acee97e6e3979b406f00fecf8904b3acca11c74a353e.zip.zip
    .zip

    Password: infected

  • 4bb1b467ea9c9d0f56f6acee97e6e3979b406f00fecf8904b3acca11c74a353e.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    5eaf18e3d2af69810b3ea3801073ef2f


    Headers

    Imports

    Sections

  • Bv9ARM.ch01.html
  • Bv9ARM.ch02.html
  • Bv9ARM.ch03.html
  • Bv9ARM.ch04.html
  • Bv9ARM.ch05.html
  • Bv9ARM.ch06.html
  • Bv9ARM.ch07.html
  • Bv9ARM.ch08.html
  • Bv9ARM.ch09.html
  • Bv9ARM.html
  • Bv9ARM.pdf
    .pdf
    • http://www.isc.org/services/support/

    • http://www.ietf.org/rfc/

    • http://Inc.couldbemail.example.com

    • http://named.pid

    • http://0.0.127.in-addr.arpa

    • http://224example.com

    • http://224eng.example.com

    • http://example.com

    • http://eng.example.com

    • Show all
  • CHANGES
    .vbs
  • COPYRIGHT
  • FAQ
  • README
  • bindevt.dll
    .dll windows:4 windows x86

    d811d71710ad58776155b7a8da1fa9db


    Headers

    Imports

    Sections

  • dig.exe
    .exe windows:4 windows x86

    f641d042f2d05ca324319925b05ce471


    Headers

    Imports

    Sections

  • dig.html
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    085a813ee77a5acc70120ae0eb9c4c11


    Headers

    Imports

    Sections

  • dnssec-keygen.html
  • dnssec-makekeyset.exe
    .exe windows:4 windows x86

    11f2947396cf627ed6dca5492f902626


    Headers

    Imports

    Sections

  • dnssec-makekeyset.html
  • dnssec-signkey.exe
    .exe windows:4 windows x86

    6206e19db74fe7960ca99b081fe028ca


    Headers

    Imports

    Sections

  • dnssec-signkey.html
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    65e20b3155fca2c916be7f36c62d9e08


    Headers

    Imports

    Sections

  • dnssec-signzone.html
  • host.exe
    .exe windows:4 windows x86

    1e80be9e684745ae1a77039493f8482c


    Headers

    Imports

    Sections

  • host.html
  • index.html
  • libdns.dll
    .dll windows:4 windows x86

    ba5dd46ce8fa3f766389622f465ba34a


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:4 windows x86

    b1d578407206b9343e0beb2fc2a8680b


    Headers

    Imports

    Exports

    Sections

  • libisc.dll
    .dll windows:4 windows x86

    6018c5ba9e86d543929ca2696641b88c


    Headers

    Imports

    Exports

    Sections

  • libisccc.dll
    .dll windows:4 windows x86

    28a5c290095ce89ac8b6d61ab8f8e8b7


    Headers

    Imports

    Exports

    Sections

  • libisccfg.dll
    .dll windows:4 windows x86

    3043765ab3d136e4acc0f6ba66e7dd7d


    Headers

    Imports

    Exports

    Sections

  • liblwres.dll
    .dll windows:4 windows x86

    0886bae705885afb5f9ac104a3cbe1b0


    Headers

    Imports

    Exports

    Sections

  • migration
  • migration-4to9
  • named-checkconf.exe
    .exe windows:4 windows x86

    fc48f2055c8f256a6bc6c314490d3e77


    Headers

    Imports

    Sections

  • named-checkconf.html
  • named-checkzone.exe
    .exe windows:4 windows x86

    4b3452f533d0eb6ec20d6beafc0161db


    Headers

    Imports

    Sections

  • named-checkzone.html
  • named.exe
    .exe windows:4 windows x86

    a260dcca28a3ca20c4e5676813ddfcee


    Headers

    Imports

    Sections

  • named.html
  • nslookup.exe
    .exe windows:4 windows x86

    64a601d37c5bbcb8e9b64b415aa3d21a


    Headers

    Imports

    Sections

  • nslookup.html
  • nsupdate.exe
    .exe windows:4 windows x86

    6fecabec90afa4828c0194344698a998


    Headers

    Imports

    Sections

  • nsupdate.html
  • readme1st.txt
  • rndc-confgen.exe
    .exe windows:4 windows x86

    d47178312fe303f0852725412b73fb37


    Headers

    Imports

    Sections

  • rndc-confgen.html
  • rndc.conf.html
  • rndc.exe
    .exe windows:4 windows x86

    bd8ebcb9dcfcdc40a6a67dac64cd5c3b


    Headers

    Imports

    Sections

  • rndc.html
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Headers

    Imports

    Sections