General

  • Target

    6072c9f33bf015ea33c747b9cb5e761746be0326f05848c93c51ecbcd226955d.zip.zip

  • Size

    13.7MB

  • MD5

    781e8bb49a877057ded231187c396f1c

  • SHA1

    eec3240fbf2bab6625460b08ab43fddd1ed2553f

  • SHA256

    6720eedcf1c4f6b62bc8a47121a63edc9001d510a2aea5a8046dcc8f6d2b1acf

  • SHA512

    2da572e0c5ecca143d3831b8c3b2efc04e56a5dc58c5eddd3578fbd530a9c6853bbce82dc57d91594c6ed2c030a7c87ede1ef63769979955057cd1af9f8d948d

  • SSDEEP

    393216:envG0UmCYvEeEXdDL0iSKi19/IGSrJ4RQCMqy:WG0UmCYnEX2i3SVbXM5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 38 IoCs

    Checks for missing Authenticode signature.

Files

  • 6072c9f33bf015ea33c747b9cb5e761746be0326f05848c93c51ecbcd226955d.zip.zip
    .zip

    Password: infected

  • 6072c9f33bf015ea33c747b9cb5e761746be0326f05848c93c51ecbcd226955d.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    6709d7f3fb0690f62699325224ee663e


    Headers

    Imports

    Sections

  • BINDInstall.ilk
  • BINDInstall.pdb
  • SHA256
  • arpaname.exe
    .exe windows:4 windows x86

    a57a15fc8d4601d987364e83fefa52c7


    Headers

    Imports

    Sections

  • arpaname.ilk
  • bindevt.dll
    .dll windows:4 windows x86

    1a433fe8295417eadfb47b95d92b1de7


    Headers

    Imports

    Sections

  • bindevt.ilk
  • bindevt.pdb
  • ddns-confgen.exe
    .exe windows:4 windows x86

    9d2de36a75b32b86e6521b3d4353682b


    Headers

    Imports

    Sections

  • ddns-confgen.ilk
  • delve.exe
    .exe windows:4 windows x86

    411c5742b25b54aeb49b39361118d531


    Headers

    Imports

    Sections

  • delve.ilk
  • dig.exe
    .exe windows:4 windows x86

    7867f1c7f348e9d94539fe9c092f4f5a


    Headers

    Imports

    Sections

  • dig.ilk
  • dnssec-dsfromkey.exe
    .exe windows:4 windows x86

    76cfe10913747513d4aec1894a48f8f1


    Headers

    Imports

    Sections

  • dnssec-dsfromkey.ilk
  • dnssec-importkey.exe
    .exe windows:4 windows x86

    e9f59006d556f9e99069d8b1409bb39d


    Headers

    Imports

    Sections

  • dnssec-importkey.ilk
  • dnssec-keyfromlabel.exe
    .exe windows:4 windows x86

    1ad072262428910366d75db5b326d58c


    Headers

    Imports

    Sections

  • dnssec-keyfromlabel.ilk
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    d11f231ac06b4e3973cde28a7369870b


    Headers

    Imports

    Sections

  • dnssec-keygen.ilk
  • dnssec-revoke.exe
    .exe windows:4 windows x86

    84b03648f98df04daacb0a92e07106d2


    Headers

    Imports

    Sections

  • dnssec-revoke.ilk
  • dnssec-settime.exe
    .exe windows:4 windows x86

    098cd4d48b56e8b147416ad1512191c4


    Headers

    Imports

    Sections

  • dnssec-settime.ilk
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    d3b676d17905add86e088dd53bf76dc9


    Headers

    Imports

    Sections

  • dnssec-signzone.ilk
  • dnssec-verify.exe
    .exe windows:4 windows x86

    79ded52d427bea39dd8de59d4ff09fee


    Headers

    Imports

    Sections

  • dnssec-verify.ilk
  • genrandom.exe
    .exe windows:4 windows x86

    dd849833d0ad8fddd9767c382bc85fe5


    Headers

    Imports

    Sections

  • genrandom.ilk
  • host.exe
    .exe windows:4 windows x86

    e2e2e5e85f4abf70e16c6e4080cfdbde


    Headers

    Imports

    Sections

  • host.ilk
  • isc-hmac-fixup.exe
    .exe windows:4 windows x86

    68a6029319946dd30b1854d94b10b528


    Headers

    Imports

    Sections

  • isc-hmac-fixup.ilk
  • libbind9.dll
    .dll windows:4 windows x86

    36adb479251f1dd5019262870096e57a


    Headers

    Imports

    Exports

    Sections

  • libbind9.ilk
  • libdns.dll
    .dll windows:4 windows x86

    e6dd9b4503fa26777dca129d7afcbff9


    Headers

    Imports

    Exports

    Sections

  • libdns.ilk
  • libeay32.dll
    .dll windows:4 windows x86

    1a59de233e1151ce6cd72e570605e2a5


    Headers

    Imports

    Exports

    Sections

  • libirs.dll
    .dll windows:4 windows x86

    c89b86a18bb3a90450ad0e3bece6a7d6


    Headers

    Imports

    Exports

    Sections

  • libirs.ilk
  • libisc.dll
    .dll windows:4 windows x86

    53239e7111cff2d7b9e4ae68acb51b15


    Headers

    Imports

    Exports

    Sections

  • libisc.ilk
  • libisccc.dll
    .dll windows:4 windows x86

    a9a20a62e309e703ed8fafae4c2e7252


    Headers

    Imports

    Exports

    Sections

  • libisccc.ilk
  • libisccfg.dll
    .dll windows:4 windows x86

    c8ffa09734ca15248c590585d9758672


    Headers

    Imports

    Exports

    Sections

  • libisccfg.ilk
  • liblwres.dll
    .dll windows:4 windows x86

    8ec1353add91c97e7a3d765e61f4faed


    Headers

    Imports

    Exports

    Sections

  • liblwres.ilk
  • libxml2.dll
    .dll windows:4 windows x86

    466104099f7246f04745eb23e99c006e


    Headers

    Imports

    Exports

    Sections

  • named-checkconf.exe
    .exe windows:4 windows x86

    1d0ee172c427f62fc7ccddf98db151bb


    Headers

    Imports

    Sections

  • named-checkconf.ilk
  • named-checkzone.exe
    .exe windows:4 windows x86

    8d4b5de712ffc0262c6d061e52c35bb8


    Headers

    Imports

    Sections

  • named-checkzone.ilk
  • named-compilezone.exe
    .exe windows:4 windows x86

    8d4b5de712ffc0262c6d061e52c35bb8


    Headers

    Imports

    Sections

  • named-compilezone.ilk
  • named-journalprint.exe
    .exe windows:4 windows x86

    174cae0e72237b9595562b0ad827d65e


    Headers

    Imports

    Sections

  • named-journalprint.ilk
  • named-rrchecker.exe
    .exe windows:4 windows x86

    c9b3ece1711bf0db720a03bd411cb2a8


    Headers

    Imports

    Sections

  • named-rrchecker.ilk
  • named.exe
    .exe windows:4 windows x86

    7c31534d64584a8d533ee38e238457ed


    Headers

    Imports

    Sections

  • named.ilk
  • nsec3hash.exe
    .exe windows:4 windows x86

    4cee68c1c978ef22a28f95b817ab5925


    Headers

    Imports

    Sections

  • nsec3hash.ilk
  • nslookup.exe
    .exe windows:4 windows x86

    c8de30d916bac55a5cebb1ad20e4bc5b


    Headers

    Imports

    Sections

  • nslookup.ilk
  • nsupdate.exe
    .exe windows:4 windows x86

    96812da98f45534c445fed8d226dba60


    Headers

    Imports

    Sections

  • nsupdate.ilk
  • rndc-confgen.exe
    .exe windows:4 windows x86

    c530d58cc37ef1dfcac1d8f33b6c00c2


    Headers

    Imports

    Sections

  • rndc-confgen.ilk
  • rndc.exe
    .exe windows:4 windows x86

    baa4608ad4e179eded5d4c0d11eed56a


    Headers

    Imports

    Sections

  • rndc.ilk
  • tsig-keygen.exe
    .exe windows:4 windows x86

    9d2de36a75b32b86e6521b3d4353682b


    Headers

    Imports

    Sections

  • tsig-keygen.ilk
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Code Sign

    Headers

    Imports

    Sections