General

  • Target

    efa8d1ec3282619b18c686b4620d65a863a88f2b61ea62ff3bded938fc9ca7c8.zip.zip

  • Size

    10.7MB

  • MD5

    5c2ad37685c7311041455e260fc6c312

  • SHA1

    dde6c28094226cd3fb74c591a18c3b14b6b63967

  • SHA256

    874589dd8399fc859af7bf3742b0515de0880d9699328a8593a8d4c8026164d7

  • SHA512

    3ac3d8f076cb10532336869b81a233c9d8bdc325d372c46b08cf153a3afa9e2a2f9b495132c9722f96ac2f3bb2bcacd4aaeaeb7c2d2170db57d8bec97d572b03

  • SSDEEP

    196608:xIppEAQe547nrOILKfjNMoZ7LNzn+6+sXRrWV+kgzs1MJRUjnx9:xIQA/ap2qGLN7nDz+aKjn7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • efa8d1ec3282619b18c686b4620d65a863a88f2b61ea62ff3bded938fc9ca7c8.zip.zip
    .zip

    Password: infected

  • efa8d1ec3282619b18c686b4620d65a863a88f2b61ea62ff3bded938fc9ca7c8.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    e3f6c4dde335a74bb4a5e1b745fa0f1b


    Headers

    Imports

    Sections

  • BINDInstall.ilk
  • BINDInstall.pdb
  • SHA256
  • bindevt.dll
    .dll windows:4 windows x86

    e127c32a095c182d34e4297729a231be


    Headers

    Imports

    Sections

  • bindevt.ilk
  • bindevt.pdb
  • dig.exe
    .exe windows:4 windows x86

    e8b3a9ff82e8155b2823abb373edefb5


    Headers

    Imports

    Sections

  • dig.ilk
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    acb507ad45b4ea230df42bba9d7ed5e3


    Headers

    Imports

    Sections

  • dnssec-keygen.ilk
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    f75232be91bf3744544343746cc0681e


    Headers

    Imports

    Sections

  • dnssec-signzone.ilk
  • host.exe
    .exe windows:4 windows x86

    45fde49c4f188d6e89aca90d10036712


    Headers

    Imports

    Sections

  • host.ilk
  • libbind9.dll
    .dll windows:4 windows x86

    421c36f1c3b346a96ca50465c26cba1a


    Headers

    Imports

    Exports

    Sections

  • libbind9.ilk
  • libdns.dll
    .dll windows:4 windows x86

    6497fc5d388ad3e57abe4684f4ba21bc


    Headers

    Imports

    Exports

    Sections

  • libdns.ilk
  • libeay32.dll
    .dll windows:4 windows x86

    a73684f271402d6f476aece2b0212b05


    Headers

    Imports

    Exports

    Sections

  • libisc.dll
    .dll windows:4 windows x86

    813c18a1fcbcbfc4b2405ee37a6765a3


    Headers

    Imports

    Exports

    Sections

  • libisc.ilk
  • libisccc.dll
    .dll windows:4 windows x86

    84e3dea07d516af1909689df013055de


    Headers

    Imports

    Exports

    Sections

  • libisccc.ilk
  • libisccfg.dll
    .dll windows:4 windows x86

    bf2038ea427e10e7fd3e9a83edd4e84f


    Headers

    Imports

    Exports

    Sections

  • libisccfg.ilk
  • liblwres.dll
    .dll windows:4 windows x86

    e2ad6d152fdd81eeef3c36eaf02842e8


    Headers

    Imports

    Exports

    Sections

  • liblwres.ilk
  • named-checkconf.exe
    .exe windows:4 windows x86

    424db0954973b01207609011e64d61f7


    Headers

    Imports

    Sections

  • named-checkconf.ilk
  • named-checkzone.exe
    .exe windows:4 windows x86

    fb74a05bdab6dea656ec4c3e49094a72


    Headers

    Imports

    Sections

  • named-checkzone.ilk
  • named-compilezone.exe
    .exe windows:4 windows x86

    fb74a05bdab6dea656ec4c3e49094a72


    Headers

    Imports

    Sections

  • named-compilezone.ilk
  • named.exe
    .exe windows:4 windows x86

    a4ec154e7ee638c60050fda95aaa832a


    Headers

    Imports

    Sections

  • named.ilk
  • nslookup.exe
    .exe windows:4 windows x86

    931e2122121698e3a251176ee5e54814


    Headers

    Imports

    Sections

  • nslookup.ilk
  • nsupdate.exe
    .exe windows:4 windows x86

    04b99cb9692c30178804655e5422b301


    Headers

    Imports

    Sections

  • nsupdate.ilk
  • rndc-confgen.exe
    .exe windows:4 windows x86

    f842309f790c7919a83f983075b8746e


    Headers

    Imports

    Sections

  • rndc-confgen.ilk
  • rndc.exe
    .exe windows:4 windows x86

    3817ecee14ef305f953dc3525636ac68


    Headers

    Imports

    Sections

  • rndc.ilk
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Code Sign

    Headers

    Imports

    Sections