General

  • Target

    7cf274a61f07df33653d6f779ca6e2b3965fa969fd3e171e966bce82607a6c4a.zip.zip

  • Size

    14.1MB

  • MD5

    5de09d18b5852b4f6535665b36423eb5

  • SHA1

    daf6da20be1dfb460541c249c46be38fa0f6a8ab

  • SHA256

    19b47dc190de5dfe23e74a7dc3a96e5a1473ab25541ffe963059ff98085796ca

  • SHA512

    6c341b0ccc5e19c68226937e9cbb96831b69f7dc73ba9dfd982bf610bbe724cdf7cf4557f7e0df4b5d7d75c572bfb69e07e82d53a02a86abb9653cd18a54bc45

  • SSDEEP

    393216:WOrMfv5MDkDnSMUNApEnSSVIg1E0m744Tt2Bzz/YmuB:WOramDWSMUNApIlVIg1E0mU4s1DYvB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 38 IoCs

    Checks for missing Authenticode signature.

Files

  • 7cf274a61f07df33653d6f779ca6e2b3965fa969fd3e171e966bce82607a6c4a.zip.zip
    .zip

    Password: infected

  • 7cf274a61f07df33653d6f779ca6e2b3965fa969fd3e171e966bce82607a6c4a.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    46dd21e3141b4b7b03c4a36384482b42


    Headers

    Imports

    Sections

  • BINDInstall.ilk
  • BINDInstall.pdb
  • COPYRIGHT
  • InstallFiles
  • InstallFlags
  • OpenSSL-LICENSE
  • SHA256
  • arpaname.exe
    .exe windows:4 windows x86

    a57a15fc8d4601d987364e83fefa52c7


    Headers

    Imports

    Sections

  • arpaname.ilk
  • bindevt.dll
    .dll windows:4 windows x86

    1a433fe8295417eadfb47b95d92b1de7


    Headers

    Imports

    Sections

  • bindevt.ilk
  • bindevt.pdb
  • ddns-confgen.exe
    .exe windows:4 windows x86

    2b0023ba128833071665b4b6d7711921


    Headers

    Imports

    Sections

  • ddns-confgen.ilk
  • delv.exe
    .exe windows:4 windows x86

    bbf966a06f67820fd7f2c53d7ed943a0


    Headers

    Imports

    Sections

  • delv.ilk
  • dig.exe
    .exe windows:4 windows x86

    4e3fcf86cbe2018392a952cff9d100b1


    Headers

    Imports

    Sections

  • dig.ilk
  • dnssec-dsfromkey.exe
    .exe windows:4 windows x86

    6369c7bd7b993878e900f209b9121d94


    Headers

    Imports

    Sections

  • dnssec-dsfromkey.ilk
  • dnssec-importkey.exe
    .exe windows:4 windows x86

    35c980c73b4bd722ede9c71b09a69a3d


    Headers

    Imports

    Sections

  • dnssec-importkey.ilk
  • dnssec-keyfromlabel.exe
    .exe windows:4 windows x86

    53bd1fb700919c093a6dccc54c62556e


    Headers

    Imports

    Sections

  • dnssec-keyfromlabel.ilk
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    0f4a2614fbb9ac6439fac2b5b522f6fc


    Headers

    Imports

    Sections

  • dnssec-keygen.ilk
  • dnssec-revoke.exe
    .exe windows:4 windows x86

    61665922da494b57c04873172393e6eb


    Headers

    Imports

    Sections

  • dnssec-revoke.ilk
  • dnssec-settime.exe
    .exe windows:4 windows x86

    211653267a7f0dbfc4b1b562bc9ee823


    Headers

    Imports

    Sections

  • dnssec-settime.ilk
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    c58e73b871ad3123ded4dce2871dcf9c


    Headers

    Imports

    Sections

  • dnssec-signzone.ilk
  • dnssec-verify.exe
    .exe windows:4 windows x86

    76c15cf00a5622bf5334a4e2d4f2cd8a


    Headers

    Imports

    Sections

  • dnssec-verify.ilk
  • genrandom.exe
    .exe windows:4 windows x86

    2f5844dc70456cfc379573c38020410d


    Headers

    Imports

    Sections

  • genrandom.ilk
  • host.exe
    .exe windows:4 windows x86

    bb9865f71a92781325c5cb99bf1618c0


    Headers

    Imports

    Sections

  • host.ilk
  • isc-hmac-fixup.exe
    .exe windows:4 windows x86

    68a6029319946dd30b1854d94b10b528


    Headers

    Imports

    Sections

  • isc-hmac-fixup.ilk
  • libbind9.dll
    .dll windows:4 windows x86

    9da685585a9181062cda5f4fb51e53b8


    Headers

    Imports

    Exports

    Sections

  • libbind9.ilk
  • libdns.dll
    .dll windows:4 windows x86

    c5f5ce2dd46fff1282ac784110e2bc10


    Headers

    Imports

    Exports

    Sections

  • libdns.ilk
  • libeay32.dll
    .dll windows:4 windows x86

    525ce9510c353b982f444742eb829700


    Headers

    Imports

    Exports

    Sections

  • libirs.dll
    .dll windows:4 windows x86

    56a559beef133ff38757495a57d10af8


    Headers

    Imports

    Exports

    Sections

  • libirs.ilk
  • libisc.dll
    .dll windows:4 windows x86

    3f9e14534599049cdab02815d1b91ca2


    Headers

    Imports

    Exports

    Sections

  • libisc.ilk
  • libisccc.dll
    .dll windows:4 windows x86

    575b8755f25ac35f23cd23e4a15aa8ef


    Headers

    Imports

    Exports

    Sections

  • libisccc.ilk
  • libisccfg.dll
    .dll windows:4 windows x86

    fda96ca2e29bdf6be6391a2a3d74478a


    Headers

    Imports

    Exports

    Sections

  • libisccfg.ilk
  • liblwres.dll
    .dll windows:4 windows x86

    9a30c7c3f20d8a0c1d779ed3da246b7d


    Headers

    Imports

    Exports

    Sections

  • liblwres.ilk
  • libxml2.dll
    .dll windows:4 windows x86

    466104099f7246f04745eb23e99c006e


    Headers

    Imports

    Exports

    Sections

  • named-checkconf.exe
    .exe windows:4 windows x86

    fcd67a354edcb3df3a9edbbef803a605


    Headers

    Imports

    Sections

  • named-checkconf.ilk
  • named-checkzone.exe
    .exe windows:4 windows x86

    8d4b5de712ffc0262c6d061e52c35bb8


    Headers

    Imports

    Sections

  • named-checkzone.ilk
  • named-compilezone.exe
    .exe windows:4 windows x86

    8d4b5de712ffc0262c6d061e52c35bb8


    Headers

    Imports

    Sections

  • named-compilezone.ilk
  • named-journalprint.exe
    .exe windows:4 windows x86

    174cae0e72237b9595562b0ad827d65e


    Headers

    Imports

    Sections

  • named-journalprint.ilk
  • named-rrchecker.exe
    .exe windows:4 windows x86

    c9b3ece1711bf0db720a03bd411cb2a8


    Headers

    Imports

    Sections

  • named-rrchecker.ilk
  • named.exe
    .exe windows:4 windows x86

    1fece7fc4a1f424d4b032d3ab281d018


    Headers

    Imports

    Sections

  • named.ilk
  • nsec3hash.exe
    .exe windows:4 windows x86

    293d53ba9d2da5e9fbced760d515ced8


    Headers

    Imports

    Sections

  • nsec3hash.ilk
  • nslookup.exe
    .exe windows:4 windows x86

    089423934663888812edc7061961a562


    Headers

    Imports

    Sections

  • nslookup.ilk
  • nsupdate.exe
    .exe windows:4 windows x86

    3912f309d7f7ee1e69a6db8a76859602


    Headers

    Imports

    Sections

  • nsupdate.ilk
  • rndc-confgen.exe
    .exe windows:4 windows x86

    c530d58cc37ef1dfcac1d8f33b6c00c2


    Headers

    Imports

    Sections

  • rndc-confgen.ilk
  • rndc.exe
    .exe windows:4 windows x86

    5810d2ed87047f3156dd74780804f0aa


    Headers

    Imports

    Sections

  • rndc.ilk
  • tsig-keygen.exe
    .exe windows:4 windows x86

    2b0023ba128833071665b4b6d7711921


    Headers

    Imports

    Sections

  • tsig-keygen.ilk
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Code Sign

    Headers

    Imports

    Sections