General

  • Target

    3878c1d4294a0de62655b29c55a15a2b6814244f1722b8ccde30ad4ef7b68cb5.zip.zip

  • Size

    11.3MB

  • MD5

    cc9d3cd4eb07b1d1693daabcbefaa307

  • SHA1

    7a1a6a63052207dad6f0103138051089a435f6aa

  • SHA256

    3572f96c59eeea1afb338da28cd169935f3a834c07d5bbf6e1aeb59c068b04e4

  • SHA512

    d657c3c3bfe5358969b580d9f4f53d3bb9a6d2809952927ecd9f0dc559762a3614cf36295498f6f4fb882f3c8878322ed64ef7d1dce7c69657d20684bb54d17f

  • SSDEEP

    196608:EzUJ/U0FFmozAx13XqVu1bqz6T+Tob49W2gu7QgWdL8awqljvhCz9403JHb:EoB5SjarOaToME+EAawMvhi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 23 IoCs

    Checks for missing Authenticode signature.

Files

  • 3878c1d4294a0de62655b29c55a15a2b6814244f1722b8ccde30ad4ef7b68cb5.zip.zip
    .zip

    Password: infected

  • 3878c1d4294a0de62655b29c55a15a2b6814244f1722b8ccde30ad4ef7b68cb5.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    9ca9354faf5c6f540eef0c910db988c9


    Headers

    Imports

    Sections

  • BINDInstall.ilk
  • BINDInstall.pdb
  • SHA256
  • bindevt.dll
    .dll windows:4 windows x86

    1a433fe8295417eadfb47b95d92b1de7


    Headers

    Imports

    Sections

  • bindevt.ilk
  • bindevt.pdb
  • dig.exe
    .exe windows:4 windows x86

    5e1056fab7effcacea0a42c57daaddcf


    Headers

    Imports

    Sections

  • dig.ilk
  • dnssec-dsfromkey.exe
    .exe windows:4 windows x86

    b56cb281888caea3ca642594d6120c5e


    Headers

    Imports

    Sections

  • dnssec-dsfromkey.ilk
  • dnssec-keyfromlabel.exe
    .exe windows:4 windows x86

    0c7d543d0b3517918ab5fc9c25a01f2d


    Headers

    Imports

    Sections

  • dnssec-keyfromlabel.ilk
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    bb39830ce4a6c7fda5b02fc83d807861


    Headers

    Imports

    Sections

  • dnssec-keygen.ilk
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    2574ba000c7fbbb9c675e5e53c9c8358


    Headers

    Imports

    Sections

  • dnssec-signzone.ilk
  • host.exe
    .exe windows:4 windows x86

    4ff60dabc7b77686dffb1ad0a0021ed0


    Headers

    Imports

    Sections

  • host.ilk
  • libbind9.dll
    .dll windows:4 windows x86

    ac119befee4188e150bb2dec787ca3cc


    Headers

    Imports

    Exports

    Sections

  • libbind9.ilk
  • libdns.dll
    .dll windows:4 windows x86

    6b7df61dee8920861eca3898d5477fa4


    Headers

    Imports

    Exports

    Sections

  • libdns.ilk
  • libeay32.dll
    .dll windows:4 windows x86

    a73684f271402d6f476aece2b0212b05


    Headers

    Imports

    Exports

    Sections

  • libisc.dll
    .dll windows:4 windows x86

    ca6445d6428fd4360bc1befab45bfe66


    Headers

    Imports

    Exports

    Sections

  • libisc.ilk
  • libisccc.dll
    .dll windows:4 windows x86

    d9673a00a097b7da4755d59800b1e985


    Headers

    Imports

    Exports

    Sections

  • libisccc.ilk
  • libisccfg.dll
    .dll windows:4 windows x86

    49f187084bd34981806fccca89864560


    Headers

    Imports

    Exports

    Sections

  • libisccfg.ilk
  • liblwres.dll
    .dll windows:4 windows x86

    f90c73c8128819f18eb2946d1a5c9281


    Headers

    Imports

    Exports

    Sections

  • liblwres.ilk
  • named-checkconf.exe
    .exe windows:4 windows x86

    540a0ccc7e0d283dd3cb2337cd5b0886


    Headers

    Imports

    Sections

  • named-checkconf.ilk
  • named-checkzone.exe
    .exe windows:4 windows x86

    92160b01781ccab312bbb56fb1958078


    Headers

    Imports

    Sections

  • named-checkzone.ilk
  • named-compilezone.exe
    .exe windows:4 windows x86

    92160b01781ccab312bbb56fb1958078


    Headers

    Imports

    Sections

  • named-compilezone.ilk
  • named.exe
    .exe windows:4 windows x86

    10215e2e283e9f898bfdfc49dad33dfa


    Headers

    Imports

    Sections

  • named.ilk
  • nslookup.exe
    .exe windows:4 windows x86

    b7f9fbbbdfac0656cd5d7cac469e2b9a


    Headers

    Imports

    Sections

  • nslookup.ilk
  • nsupdate.exe
    .exe windows:4 windows x86

    f34aebf2dd7f569d84e29f148dfb8ff1


    Headers

    Imports

    Sections

  • nsupdate.ilk
  • rndc-confgen.exe
    .exe windows:4 windows x86

    8e3458484fa0ba754becdcee254b4426


    Headers

    Imports

    Sections

  • rndc-confgen.ilk
  • rndc.exe
    .exe windows:4 windows x86

    24902fb8a0a5397df9abe51e90ba54fd


    Headers

    Imports

    Sections

  • rndc.ilk
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Code Sign

    Headers

    Imports

    Sections