General

  • Target

    614bd042dd616bb90d5121b0c8aa56c12bf83ca139ab8995307c08e2ba74a80d.zip.zip

  • Size

    10.8MB

  • MD5

    4c0917889fc39e756667788d645d28de

  • SHA1

    3a00211044110bac6f59e4021ebd3ae146680cef

  • SHA256

    2196592d9206a2cb569f62c5b33e8054949bdcea90fd01cbd7174d7954f3a82a

  • SHA512

    9a82da81a8b2f93b1065dea798904e2765e97314ea1d007f2657b60c613339673f7f84dd94dc2a621269c225e8d78a411d4938b0efc278bf8e90440d1bc06399

  • SSDEEP

    196608:NNAC/SRmI4gNiSclKhCKno+JVnDO2dDOnLLP/S6DIJvPQH9zL2wVMxT/uo:NNAC/2mJgNiSQ+JVDvOf/N79GwKxTmo

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • 614bd042dd616bb90d5121b0c8aa56c12bf83ca139ab8995307c08e2ba74a80d.zip.zip
    .zip

    Password: infected

  • 614bd042dd616bb90d5121b0c8aa56c12bf83ca139ab8995307c08e2ba74a80d.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    e3f6c4dde335a74bb4a5e1b745fa0f1b


    Headers

    Imports

    Sections

  • BINDInstall.ilk
  • BINDInstall.pdb
  • SHA256
  • bindevt.dll
    .dll windows:4 windows x86

    e127c32a095c182d34e4297729a231be


    Headers

    Imports

    Sections

  • bindevt.ilk
  • bindevt.pdb
  • dig.exe
    .exe windows:4 windows x86

    8d6de78c54b366de0e6e3d43c1101f19


    Headers

    Imports

    Sections

  • dig.ilk
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    62cb0570df6c0862d3509efb4e05304f


    Headers

    Imports

    Sections

  • dnssec-keygen.ilk
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    cf17eca1ab63546b54ec8441f73ba92e


    Headers

    Imports

    Sections

  • dnssec-signzone.ilk
  • host.exe
    .exe windows:4 windows x86

    2c7b804d05d3695c7606cb12a262be57


    Headers

    Imports

    Sections

  • host.ilk
  • libbind9.dll
    .dll windows:4 windows x86

    1f836d33bf4dc8431745a1d098f1f1ff


    Headers

    Imports

    Exports

    Sections

  • libbind9.ilk
  • libdns.dll
    .dll windows:4 windows x86

    60222b7b9a60c160063035165c59b004


    Headers

    Imports

    Exports

    Sections

  • libdns.ilk
  • libeay32.dll
    .dll windows:4 windows x86

    a73684f271402d6f476aece2b0212b05


    Headers

    Imports

    Exports

    Sections

  • libisc.dll
    .dll windows:4 windows x86

    7001d67cd8c8cff3feeb86ff195f8a4e


    Headers

    Imports

    Exports

    Sections

  • libisc.ilk
  • libisccc.dll
    .dll windows:4 windows x86

    84e3dea07d516af1909689df013055de


    Headers

    Imports

    Exports

    Sections

  • libisccc.ilk
  • libisccfg.dll
    .dll windows:4 windows x86

    d55998e0b2f96cc6eb5ee046c9fecf9b


    Headers

    Imports

    Exports

    Sections

  • libisccfg.ilk
  • liblwres.dll
    .dll windows:4 windows x86

    e2ad6d152fdd81eeef3c36eaf02842e8


    Headers

    Imports

    Exports

    Sections

  • liblwres.ilk
  • named-checkconf.exe
    .exe windows:4 windows x86

    4c4b79f7ef1670418381990a5c6ae714


    Headers

    Imports

    Sections

  • named-checkconf.ilk
  • named-checkzone.exe
    .exe windows:4 windows x86

    2ba4344e69bf0e097b040f6fdad991fe


    Headers

    Imports

    Sections

  • named-checkzone.ilk
  • named-compilezone.exe
    .exe windows:4 windows x86

    2ba4344e69bf0e097b040f6fdad991fe


    Headers

    Imports

    Sections

  • named-compilezone.ilk
  • named.exe
    .exe windows:4 windows x86

    10e9f03482e7d1b5fe52868b5104c896


    Headers

    Imports

    Sections

  • named.ilk
  • nslookup.exe
    .exe windows:4 windows x86

    db9fab1c4f292d1419a786d5b7428748


    Headers

    Imports

    Sections

  • nslookup.ilk
  • nsupdate.exe
    .exe windows:4 windows x86

    3dc2d070b6afd8740490eebd1c4a6ea1


    Headers

    Imports

    Sections

  • nsupdate.ilk
  • rndc-confgen.exe
    .exe windows:4 windows x86

    419a731735bcefbc53f673612ffeb35e


    Headers

    Imports

    Sections

  • rndc-confgen.ilk
  • rndc.exe
    .exe windows:4 windows x86

    cc96837f3a6ce6fcb118abe6b7124af6


    Headers

    Imports

    Sections

  • rndc.ilk
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Code Sign

    Headers

    Imports

    Sections