General

  • Target

    cb8efd285067f77d8b1651f7e44be9f32a90f0c4ddb7e8a8012dfc51c48a03d2.zip.zip

  • Size

    12.7MB

  • MD5

    f66277f52a296cbda7939c41b4b2b90c

  • SHA1

    b251eebda6a5224e164b143da05e21d2e305080b

  • SHA256

    9ef873853c8014561f837a8b83f15c15449633c5757690b10775409f43de8a64

  • SHA512

    d3fd21b7c2f4b0de49b064d9fd33626366a5d2d13b7b4ceb3c2c0dbac92adfcc86b2b89ac880b8a72b2ecd33ba7995f0f8a114642d460244421b7fb160641c32

  • SSDEEP

    393216:3E1jmbNWYcpos7pONUlZJ647hSPhPRMSeK:3Ujm0Ycpoi4kJ64Wh+Sr

Score
3/10

Malware Config

Signatures

  • Unsigned PE 32 IoCs

    Checks for missing Authenticode signature.

Files

  • cb8efd285067f77d8b1651f7e44be9f32a90f0c4ddb7e8a8012dfc51c48a03d2.zip.zip
    .zip

    Password: infected

  • cb8efd285067f77d8b1651f7e44be9f32a90f0c4ddb7e8a8012dfc51c48a03d2.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    6709d7f3fb0690f62699325224ee663e


    Headers

    Imports

    Sections

  • BINDInstall.ilk
  • BINDInstall.pdb
  • SHA256
  • arpaname.exe
    .exe windows:4 windows x86

    a57a15fc8d4601d987364e83fefa52c7


    Headers

    Imports

    Sections

  • arpaname.ilk
  • bindevt.dll
    .dll windows:4 windows x86

    1a433fe8295417eadfb47b95d92b1de7


    Headers

    Imports

    Sections

  • bindevt.ilk
  • bindevt.pdb
  • ddns-confgen.exe
    .exe windows:4 windows x86

    b518fb8961ebf953ef6fbe2f1eb0ab46


    Headers

    Imports

    Sections

  • ddns-confgen.ilk
  • dig.exe
    .exe windows:4 windows x86

    46c44200268e0c6429d06b9a52126ba7


    Headers

    Imports

    Sections

  • dig.ilk
  • dnssec-dsfromkey.exe
    .exe windows:4 windows x86

    f0f311fc9436fd5d0655e941df80c2f7


    Headers

    Imports

    Sections

  • dnssec-dsfromkey.ilk
  • dnssec-keyfromlabel.exe
    .exe windows:4 windows x86

    98f2fcb94500203f74b6e635d96e73b4


    Headers

    Imports

    Sections

  • dnssec-keyfromlabel.ilk
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    f796a36d9d91601044531a42a0e36b72


    Headers

    Imports

    Sections

  • dnssec-keygen.ilk
  • dnssec-revoke.exe
    .exe windows:4 windows x86

    58a46e6d70f3f5b66aefa699b98f2dbe


    Headers

    Imports

    Sections

  • dnssec-revoke.ilk
  • dnssec-settime.exe
    .exe windows:4 windows x86

    11102d6956bc80fcc7dae21ae53dc70a


    Headers

    Imports

    Sections

  • dnssec-settime.ilk
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    13916db691dba7cc1447656bd9faf472


    Headers

    Imports

    Sections

  • dnssec-signzone.ilk
  • genrandom.exe
    .exe windows:4 windows x86

    2f5844dc70456cfc379573c38020410d


    Headers

    Imports

    Sections

  • genrandom.ilk
  • host.exe
    .exe windows:4 windows x86

    9d460ceb6672d879f4d51c713dcb52e9


    Headers

    Imports

    Sections

  • host.ilk
  • isc-hmac-fixup.exe
    .exe windows:4 windows x86

    68a6029319946dd30b1854d94b10b528


    Headers

    Imports

    Sections

  • isc-hmac-fixup.ilk
  • libbind9.dll
    .dll windows:4 windows x86

    ca1d60e68c9c92f6fc4d2d770fc682e8


    Headers

    Imports

    Exports

    Sections

  • libbind9.ilk
  • libdns.dll
    .dll windows:4 windows x86

    80ccde9199a647a97699b85c4b0cdac5


    Headers

    Imports

    Exports

    Sections

  • libdns.ilk
  • libeay32.dll
    .dll windows:4 windows x86

    1a59de233e1151ce6cd72e570605e2a5


    Headers

    Imports

    Exports

    Sections

  • libisc.dll
    .dll windows:4 windows x86

    66e4b3d301147da2b20344d95d3167a9


    Headers

    Imports

    Exports

    Sections

  • libisc.ilk
  • libisccc.dll
    .dll windows:4 windows x86

    797efd4e4f58668b18c9009af580256a


    Headers

    Imports

    Exports

    Sections

  • libisccc.ilk
  • libisccfg.dll
    .dll windows:4 windows x86

    fbe06dae67cd9e347cfca43a377860b2


    Headers

    Imports

    Exports

    Sections

  • libisccfg.ilk
  • liblwres.dll
    .dll windows:4 windows x86

    9a30c7c3f20d8a0c1d779ed3da246b7d


    Headers

    Imports

    Exports

    Sections

  • liblwres.ilk
  • libxml2.dll
    .dll windows:4 windows x86

    466104099f7246f04745eb23e99c006e


    Headers

    Imports

    Exports

    Sections

  • named-checkconf.exe
    .exe windows:4 windows x86

    60c3d86118e096090bccfe347b7fb789


    Headers

    Imports

    Sections

  • named-checkconf.ilk
  • named-checkzone.exe
    .exe windows:4 windows x86

    876302de240cc189ff8767bfaaccc568


    Headers

    Imports

    Sections

  • named-checkzone.ilk
  • named-compilezone.exe
    .exe windows:4 windows x86

    876302de240cc189ff8767bfaaccc568


    Headers

    Imports

    Sections

  • named-compilezone.ilk
  • named-journalprint.exe
    .exe windows:4 windows x86

    c6e3231ba7f4dac073902a0e5f3e8fbe


    Headers

    Imports

    Sections

  • named-journalprint.ilk
  • named.exe
    .exe windows:4 windows x86

    3c91d199a986330b19c1cdc373795b81


    Headers

    Imports

    Sections

  • named.ilk
  • nsec3hash.exe
    .exe windows:4 windows x86

    293d53ba9d2da5e9fbced760d515ced8


    Headers

    Imports

    Sections

  • nsec3hash.ilk
  • nslookup.exe
    .exe windows:4 windows x86

    e5afee8c9bbcd297c1a89af0740bf649


    Headers

    Imports

    Sections

  • nslookup.ilk
  • nsupdate.exe
    .exe windows:4 windows x86

    943443dfdab54fb4747b0c907bf06db6


    Headers

    Imports

    Sections

  • nsupdate.ilk
  • rndc-confgen.exe
    .exe windows:4 windows x86

    9ac2fb0ca4c33f352bad79ac1da95c7d


    Headers

    Imports

    Sections

  • rndc-confgen.ilk
  • rndc.exe
    .exe windows:4 windows x86

    323fd8420a8968782e45bd693a1522e7


    Headers

    Imports

    Sections

  • rndc.ilk
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Code Sign

    Headers

    Imports

    Sections