Overview

overview

7

Static

static

7

DragonGet.vbs

windows7-x64

1

DragonGet.vbs

windows10-2004-x64

1

DragonList.exe

windows7-x64

7

DragonList.exe

windows10-2004-x64

7

DragonServe.vbs

windows7-x64

1

DragonServe.vbs

windows10-2004-x64

1

amfloodNG.vbs

windows7-x64

1

amfloodNG.vbs

windows10-2004-x64

1

DragonUnzip.exe

windows7-x64

7

DragonUnzip.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3c02d687de8d6e879a204a0b739870c03638322dc45fb636d733700b3c2717a.zip.zip

  • Size

    1.3MB

  • MD5

    cb900f4d0712807c005c592f5a648719

  • SHA1

    bb243541af88d74802f74a5ea4a446be60ad8c40

  • SHA256

    fed3154fa44c3d4c315f61f7716ed099c27bdb350dc9059359976d2a29683492

  • SHA512

    ddfe1870984daa6cfe16b6037e6b5dd12ff781cfa16b3ec5eb2fc91c11a5d5cd85751cd1407beef204de171b04516d96902a210dac45d16f3bae4f7e3505b2a8

  • SSDEEP

    24576:LtYn1sDTUVU6QYJ9ZqAkQHCB8zUDsjDiYoS0LGxTWtf:pY1s0VU6d9Zqf+I8/3oSy

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • d3c02d687de8d6e879a204a0b739870c03638322dc45fb636d733700b3c2717a.zip.zip
    .zip

    Password: infected

  • d3c02d687de8d6e879a204a0b739870c03638322dc45fb636d733700b3c2717a.zip
    .zip
  • DRAGON
    .zip
  • DragonGet.mrc
    .vbs
  • DragonList.exe
    .exe windows:1 windows x86


    Headers

    Sections

  • DragonServe.mrc
    .vbs
  • KeepTrackNG.mrc
  • amfloodNG.mrc
    .vbs
  • DRAGONSERVE1_4.HLP
  • DragonUnzip.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections

  • Instalardragon.mrc