General

  • Target

    99028cfd4fc3e28ddac49c3140d8b8898dd59446ec64dca2ac740be911c43b77.zip.zip

  • Size

    11.3MB

  • MD5

    90a95c36a38be372f71a6737b44daa7a

  • SHA1

    e7b7356092283fb319776361b3e9c3303bbceecb

  • SHA256

    1b8bf49adc902d005cc6ea2fd8ab09710dca04c438a886a316e16421229eadd8

  • SHA512

    021f125eb638e2db9e91de06e0ed3ff7294b4899ab31c9f29eb5474e5afa5784072ee531bc13eccd8d76673e8d57c4c04d1eb78f95698a89eaa069e163affd0f

  • SSDEEP

    196608:dFsRi9RZugl5EXOXcV/33Cf1WdWub1N9hPmOiQ43bFS+1DePS:dUwnu4++XoHCdWBxN9hPliLpxZ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 23 IoCs

    Checks for missing Authenticode signature.

Files

  • 99028cfd4fc3e28ddac49c3140d8b8898dd59446ec64dca2ac740be911c43b77.zip.zip
    .zip

    Password: infected

  • 99028cfd4fc3e28ddac49c3140d8b8898dd59446ec64dca2ac740be911c43b77.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    9ca9354faf5c6f540eef0c910db988c9


    Headers

    Imports

    Sections

  • BINDInstall.ilk
  • BINDInstall.pdb
  • SHA256
  • bindevt.dll
    .dll windows:4 windows x86

    1a433fe8295417eadfb47b95d92b1de7


    Headers

    Imports

    Sections

  • bindevt.ilk
  • bindevt.pdb
  • dig.exe
    .exe windows:4 windows x86

    5e1056fab7effcacea0a42c57daaddcf


    Headers

    Imports

    Sections

  • dig.ilk
  • dnssec-dsfromkey.exe
    .exe windows:4 windows x86

    b56cb281888caea3ca642594d6120c5e


    Headers

    Imports

    Sections

  • dnssec-dsfromkey.ilk
  • dnssec-keyfromlabel.exe
    .exe windows:4 windows x86

    0c7d543d0b3517918ab5fc9c25a01f2d


    Headers

    Imports

    Sections

  • dnssec-keyfromlabel.ilk
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    bb39830ce4a6c7fda5b02fc83d807861


    Headers

    Imports

    Sections

  • dnssec-keygen.ilk
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    2574ba000c7fbbb9c675e5e53c9c8358


    Headers

    Imports

    Sections

  • dnssec-signzone.ilk
  • host.exe
    .exe windows:4 windows x86

    4ff60dabc7b77686dffb1ad0a0021ed0


    Headers

    Imports

    Sections

  • host.ilk
  • libbind9.dll
    .dll windows:4 windows x86

    ac119befee4188e150bb2dec787ca3cc


    Headers

    Imports

    Exports

    Sections

  • libbind9.ilk
  • libdns.dll
    .dll windows:4 windows x86

    5a6ef8e5e5cc23f2d710431e736dab5f


    Headers

    Imports

    Exports

    Sections

  • libdns.ilk
  • libeay32.dll
    .dll windows:4 windows x86

    a73684f271402d6f476aece2b0212b05


    Headers

    Imports

    Exports

    Sections

  • libisc.dll
    .dll windows:4 windows x86

    ca6445d6428fd4360bc1befab45bfe66


    Headers

    Imports

    Exports

    Sections

  • libisc.ilk
  • libisccc.dll
    .dll windows:4 windows x86

    d9673a00a097b7da4755d59800b1e985


    Headers

    Imports

    Exports

    Sections

  • libisccc.ilk
  • libisccfg.dll
    .dll windows:4 windows x86

    49f187084bd34981806fccca89864560


    Headers

    Imports

    Exports

    Sections

  • libisccfg.ilk
  • liblwres.dll
    .dll windows:4 windows x86

    f90c73c8128819f18eb2946d1a5c9281


    Headers

    Imports

    Exports

    Sections

  • liblwres.ilk
  • named-checkconf.exe
    .exe windows:4 windows x86

    540a0ccc7e0d283dd3cb2337cd5b0886


    Headers

    Imports

    Sections

  • named-checkconf.ilk
  • named-checkzone.exe
    .exe windows:4 windows x86

    92160b01781ccab312bbb56fb1958078


    Headers

    Imports

    Sections

  • named-checkzone.ilk
  • named-compilezone.exe
    .exe windows:4 windows x86

    92160b01781ccab312bbb56fb1958078


    Headers

    Imports

    Sections

  • named-compilezone.ilk
  • named.exe
    .exe windows:4 windows x86

    10215e2e283e9f898bfdfc49dad33dfa


    Headers

    Imports

    Sections

  • named.ilk
  • nslookup.exe
    .exe windows:4 windows x86

    b7f9fbbbdfac0656cd5d7cac469e2b9a


    Headers

    Imports

    Sections

  • nslookup.ilk
  • nsupdate.exe
    .exe windows:4 windows x86

    f34aebf2dd7f569d84e29f148dfb8ff1


    Headers

    Imports

    Sections

  • nsupdate.ilk
  • rndc-confgen.exe
    .exe windows:4 windows x86

    8e3458484fa0ba754becdcee254b4426


    Headers

    Imports

    Sections

  • rndc-confgen.ilk
  • rndc.exe
    .exe windows:4 windows x86

    24902fb8a0a5397df9abe51e90ba54fd


    Headers

    Imports

    Sections

  • rndc.ilk
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Code Sign

    Headers

    Imports

    Sections