General

  • Target

    48f96623061d87ed6941ea84dce06763ae0e3f521a5d9ea56dbce01896c5763e.zip.zip

  • Size

    93KB

  • MD5

    9367cc2b7c8e830b98ea151b60647371

  • SHA1

    e50d6b4c4a67dccb3e24e04045465e2aed4765aa

  • SHA256

    c7ee8e6c9d18be7659171c6eee8fdee62fa471f0cb03e2a95eec2d9fcf85cc71

  • SHA512

    b87914e0e7e0e84f48a55086c2bc66a2ea370ba3754b7f71e62b38f2c8878f5c624456ad283730d273c20c7e5b7bf1b9fd40fe012d8d3c9b83bd27a3104a7ab2

  • SSDEEP

    1536:/+sep19Tn3ogrSX6dnkpHUOPt9f1d6HQOB+X8zCTnWg5Y5MNMokHrHSJcUN+Z:ObTny8nLOVd1duQOHCbW8MnyxNo

Score
1/10

Malware Config

Signatures

Files

  • 48f96623061d87ed6941ea84dce06763ae0e3f521a5d9ea56dbce01896c5763e.zip.zip
    .zip

    Password: infected

  • 48f96623061d87ed6941ea84dce06763ae0e3f521a5d9ea56dbce01896c5763e.zip
    .zip
  • ELiRT.dcu
  • EliRT.pas
  • EliRT_OMF_B.obj
  • Ninja.ini
  • Readme.txt
  • TempNinja.dpr
  • exploits/asn1_spreader.pas
    .js
  • exploits/exASN.ini
  • exploits/exASN1.pas
  • exploits/exDCOM2.pas
  • exploits/exNetAPI.dcu
  • exploits/exNetAPI.pas
  • exploits/exNetApi.ini
  • exploits/exNetbios.dcu
  • exploits/exNetbios.pas
    .js
  • exploits/exPNP.dcu
  • exploits/exPNP.pas
  • exploits/exVNC.dcu
  • exploits/exVNC.pas
  • exploits/upnp_spreader.dcu
  • exploits/upnp_spreader.pas
  • lsass2_spreader.pas
    .js
  • lsass_const.pas
  • uStrList.pas
  • untBot.pas
  • untCrypt.pas
  • untFTPD.pas
  • untFunctions.pas
  • untGlobalDeclare.pas
  • untHTTPDownload.pas
    .js
  • untHoneyPot.pas
  • untNetbios.pas
    .js
  • untOutputs.pas
  • untRunOnClose.pas
    .js
  • untScanner.pas
  • untSockets.pas
    .js
  • untTCPIPPatcher.pas
    .js
  • untThreads.pas