General

  • Target

    7dc10253864a0d9b642829392b4333cbb6ef605652f60bda33c48e2a5ea9440b.zip.zip

  • Size

    12.0MB

  • MD5

    d0e161651c966e045897e43d865e77e4

  • SHA1

    a65da31aee7d130ceb5021547918c477ff3df325

  • SHA256

    f33f12f9321142f50f244cde21ca1f165312f3a2f24c26d4c88154211f0cfbb8

  • SHA512

    c001e82c6539b1979651a573faedbcb2b01aad1616e192cf901a13d231af473806b728c5fd8ada233c07ad9c45e1c293441e87294e38e2dcfb022d1c6ab65321

  • SSDEEP

    196608:dDk1+c9gfWY+WYCk/mViSNxmaJSuFUJXMbh7dZvdv8IcOH+X0pb9XgD3Q61:q1PgOYeCk47tSuFUsh7bdE2ekpb9m3b1

Score
3/10

Malware Config

Signatures

  • Unsigned PE 30 IoCs

    Checks for missing Authenticode signature.

Files

  • 7dc10253864a0d9b642829392b4333cbb6ef605652f60bda33c48e2a5ea9440b.zip.zip
    .zip

    Password: infected

  • 7dc10253864a0d9b642829392b4333cbb6ef605652f60bda33c48e2a5ea9440b.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    e3f6c4dde335a74bb4a5e1b745fa0f1b


    Headers

    Imports

    Sections

  • BINDInstall.ilk
  • BINDInstall.pdb
  • SHA256
  • bindevt.dll
    .dll windows:4 windows x86

    e127c32a095c182d34e4297729a231be


    Headers

    Imports

    Sections

  • bindevt.ilk
  • bindevt.pdb
  • ddns-confgen.exe
    .exe windows:4 windows x86

    c85b400a388cde50cd9f4ecf79a285e3


    Headers

    Imports

    Sections

  • ddns-confgen.ilk
  • dig.exe
    .exe windows:4 windows x86

    b569429960f1fddad6a6ac3e34349fa4


    Headers

    Imports

    Sections

  • dig.ilk
  • dnssec-dsfromkey.exe
    .exe windows:4 windows x86

    f58d6216f9a62b09ccdaa4c5304b5d29


    Headers

    Imports

    Sections

  • dnssec-dsfromkey.ilk
  • dnssec-keyfromlabel.exe
    .exe windows:4 windows x86

    a1136cc3f92c044f422287e82981a1c5


    Headers

    Imports

    Sections

  • dnssec-keyfromlabel.ilk
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    8bea0552e93c85aed15d1ad3de598557


    Headers

    Imports

    Sections

  • dnssec-keygen.ilk
  • dnssec-revoke.exe
    .exe windows:4 windows x86

    ecab55baf2e45016081cc7afecfa3958


    Headers

    Imports

    Sections

  • dnssec-revoke.ilk
  • dnssec-settime.exe
    .exe windows:4 windows x86

    b71be3f8e8dc8aa4b9b154a515bad6f6


    Headers

    Imports

    Sections

  • dnssec-settime.ilk
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    9f6d45affbdca2862e52639e68df46eb


    Headers

    Imports

    Sections

  • dnssec-signzone.ilk
  • host.exe
    .exe windows:4 windows x86

    44835a39adf279430e17ff118be23448


    Headers

    Imports

    Sections

  • host.ilk
  • libbind9.dll
    .dll windows:4 windows x86

    0755b01173dde82b911b3b382cda583f


    Headers

    Imports

    Exports

    Sections

  • libbind9.ilk
  • libdns.dll
    .dll windows:4 windows x86

    8098c086c8722c1223cfca1edc88f12b


    Headers

    Imports

    Exports

    Sections

  • libdns.ilk
  • libeay32.dll
    .dll windows:4 windows x86

    a73684f271402d6f476aece2b0212b05


    Headers

    Imports

    Exports

    Sections

  • libisc.dll
    .dll windows:4 windows x86

    806a12e9dcbfac9aaeda4b2d817e3e62


    Headers

    Imports

    Exports

    Sections

  • libisc.ilk
  • libisccc.dll
    .dll windows:4 windows x86

    ba5b826794f8ba2929377e29c980df5e


    Headers

    Imports

    Exports

    Sections

  • libisccc.ilk
  • libisccfg.dll
    .dll windows:4 windows x86

    21ed18638ae11ca63f4a221902a900c0


    Headers

    Imports

    Exports

    Sections

  • libisccfg.ilk
  • liblwres.dll
    .dll windows:4 windows x86

    e2ad6d152fdd81eeef3c36eaf02842e8


    Headers

    Imports

    Exports

    Sections

  • liblwres.ilk
  • libxml2.dll
    .dll windows:4 windows x86

    466104099f7246f04745eb23e99c006e


    Headers

    Imports

    Exports

    Sections

  • named-checkconf.exe
    .exe windows:4 windows x86

    2753cc2db9f8c4b57c567f0e4b3e03d6


    Headers

    Imports

    Sections

  • named-checkconf.ilk
  • named-checkzone.exe
    .exe windows:4 windows x86

    e8fad57e4095db8fb1ddec3eb3475234


    Headers

    Imports

    Sections

  • named-checkzone.ilk
  • named-compilezone.exe
    .exe windows:4 windows x86

    e8fad57e4095db8fb1ddec3eb3475234


    Headers

    Imports

    Sections

  • named-compilezone.ilk
  • named.exe
    .exe windows:4 windows x86

    22ae888c48d90ce60acb4ed1aa48b9d2


    Headers

    Imports

    Sections

  • named.ilk
  • nslookup.exe
    .exe windows:4 windows x86

    9246e8506a2b6b7618d9da8ecde5212a


    Headers

    Imports

    Sections

  • nslookup.ilk
  • nsupdate.exe
    .exe windows:4 windows x86

    f1581ce5c102cc3d09dba1649dd49b73


    Headers

    Imports

    Sections

  • nsupdate.ilk
  • pkcs11-destroy.exe
    .exe windows:4 windows x86

    ee839d33f8a8c2445b39e52869fe5d05


    Headers

    Imports

    Sections

  • pkcs11-destroy.ilk
  • pkcs11-keygen.exe
    .exe windows:4 windows x86

    3e890ced5e4d7d8beb2d691846e26aca


    Headers

    Imports

    Sections

  • pkcs11-keygen.ilk
  • pkcs11-list.exe
    .exe windows:4 windows x86

    bb30b5f23894b7aed8db361f1e6cadd8


    Headers

    Imports

    Sections

  • pkcs11-list.ilk
  • rndc-confgen.exe
    .exe windows:4 windows x86

    b4ccd6003df1e29f19abd9daa57b63df


    Headers

    Imports

    Sections

  • rndc-confgen.ilk
  • rndc.exe
    .exe windows:4 windows x86

    d29956094ff0315371c1d8c3b1594655


    Headers

    Imports

    Sections

  • rndc.ilk
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Code Sign

    Headers

    Imports

    Sections