General

  • Target

    d76c538f0e78c40abb03b870f3370ae290d1ea121e888e483aba1328182a546c.zip.zip

  • Size

    13.7MB

  • MD5

    d991f050f7cff7e8c8b548f65fe5fad9

  • SHA1

    cae44bc7360629be19b06e96ddc3c54273caf6d8

  • SHA256

    d3300ab39338b439cab09b647b15ec56b42c523ce7ba062599dd746e7a76b52a

  • SHA512

    245622213ff036e42afb5d322200b68e7b7176e0ed3d1a7d47b702a411e6f29c5736c50a54a800b8899bc23dfccbeac418b4b1dfdbc5ed6f95bb6e2d46231480

  • SSDEEP

    196608:89jJX36jK+nmX0gse4NjvRejY2dVzwQqmojeqo5OD1+i6Ep0C/hgNhh70v+/2LZB:Kl36jvmMP5ET7zwQhQuybZdX

Score
3/10

Malware Config

Signatures

  • Unsigned PE 38 IoCs

    Checks for missing Authenticode signature.

Files

  • d76c538f0e78c40abb03b870f3370ae290d1ea121e888e483aba1328182a546c.zip.zip
    .zip

    Password: infected

  • d76c538f0e78c40abb03b870f3370ae290d1ea121e888e483aba1328182a546c.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    6709d7f3fb0690f62699325224ee663e


    Headers

    Imports

    Sections

  • BINDInstall.ilk
  • BINDInstall.pdb
  • COPYRIGHT
  • OpenSSL-LICENSE
  • SHA256
  • arpaname.exe
    .exe windows:4 windows x86

    a57a15fc8d4601d987364e83fefa52c7


    Headers

    Imports

    Sections

  • arpaname.ilk
  • bindevt.dll
    .dll windows:4 windows x86

    1a433fe8295417eadfb47b95d92b1de7


    Headers

    Imports

    Sections

  • bindevt.ilk
  • bindevt.pdb
  • ddns-confgen.exe
    .exe windows:4 windows x86

    2b0023ba128833071665b4b6d7711921


    Headers

    Imports

    Sections

  • ddns-confgen.ilk
  • delv.exe
    .exe windows:4 windows x86

    bbf966a06f67820fd7f2c53d7ed943a0


    Headers

    Imports

    Sections

  • delv.ilk
  • dig.exe
    .exe windows:4 windows x86

    038d2b4fb43e303817d5fe53445780d3


    Headers

    Imports

    Sections

  • dig.ilk
  • dnssec-dsfromkey.exe
    .exe windows:4 windows x86

    76cfe10913747513d4aec1894a48f8f1


    Headers

    Imports

    Sections

  • dnssec-dsfromkey.ilk
  • dnssec-importkey.exe
    .exe windows:4 windows x86

    e9f59006d556f9e99069d8b1409bb39d


    Headers

    Imports

    Sections

  • dnssec-importkey.ilk
  • dnssec-keyfromlabel.exe
    .exe windows:4 windows x86

    1ad072262428910366d75db5b326d58c


    Headers

    Imports

    Sections

  • dnssec-keyfromlabel.ilk
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    1a08b144de8016cdcd5672948b99362a


    Headers

    Imports

    Sections

  • dnssec-keygen.ilk
  • dnssec-revoke.exe
    .exe windows:4 windows x86

    84b03648f98df04daacb0a92e07106d2


    Headers

    Imports

    Sections

  • dnssec-revoke.ilk
  • dnssec-settime.exe
    .exe windows:4 windows x86

    7cb7b5ba79beaf9f3facfae1f9af45b0


    Headers

    Imports

    Sections

  • dnssec-settime.ilk
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    5ae0d3461b2ea9f7009926a39d723bf8


    Headers

    Imports

    Sections

  • dnssec-signzone.ilk
  • dnssec-verify.exe
    .exe windows:4 windows x86

    79ded52d427bea39dd8de59d4ff09fee


    Headers

    Imports

    Sections

  • dnssec-verify.ilk
  • genrandom.exe
    .exe windows:4 windows x86

    2f5844dc70456cfc379573c38020410d


    Headers

    Imports

    Sections

  • genrandom.ilk
  • host.exe
    .exe windows:4 windows x86

    d8d0ea780a73320e5af0fa22dad9d7d2


    Headers

    Imports

    Sections

  • host.ilk
  • isc-hmac-fixup.exe
    .exe windows:4 windows x86

    68a6029319946dd30b1854d94b10b528


    Headers

    Imports

    Sections

  • isc-hmac-fixup.ilk
  • libbind9.dll
    .dll windows:4 windows x86

    4a482e3e571c08632e9a791005d8f44f


    Headers

    Imports

    Exports

    Sections

  • libbind9.ilk
  • libdns.dll
    .dll windows:4 windows x86

    575e9953eac300cbb008699412fa1058


    Headers

    Imports

    Exports

    Sections

  • libdns.ilk
  • libeay32.dll
    .dll windows:4 windows x86

    caad2c208107dea61f77e77ceeee0d5a


    Headers

    Imports

    Exports

    Sections

  • libirs.dll
    .dll windows:4 windows x86

    56a559beef133ff38757495a57d10af8


    Headers

    Imports

    Exports

    Sections

  • libirs.ilk
  • libisc.dll
    .dll windows:4 windows x86

    65e073b1899ea4ae68f7047854f3a5a8


    Headers

    Imports

    Exports

    Sections

  • libisc.ilk
  • libisccc.dll
    .dll windows:4 windows x86

    a9a20a62e309e703ed8fafae4c2e7252


    Headers

    Imports

    Exports

    Sections

  • libisccc.ilk
  • libisccfg.dll
    .dll windows:4 windows x86

    6811b128b55ac8687e6921226438fd6b


    Headers

    Imports

    Exports

    Sections

  • libisccfg.ilk
  • liblwres.dll
    .dll windows:4 windows x86

    9a30c7c3f20d8a0c1d779ed3da246b7d


    Headers

    Imports

    Exports

    Sections

  • liblwres.ilk
  • libxml2.dll
    .dll windows:4 windows x86

    466104099f7246f04745eb23e99c006e


    Headers

    Imports

    Exports

    Sections

  • named-checkconf.exe
    .exe windows:4 windows x86

    a5a37ac663719defa2f60ac2b81c2a2f


    Headers

    Imports

    Sections

  • named-checkconf.ilk
  • named-checkzone.exe
    .exe windows:4 windows x86

    8d4b5de712ffc0262c6d061e52c35bb8


    Headers

    Imports

    Sections

  • named-checkzone.ilk
  • named-compilezone.exe
    .exe windows:4 windows x86

    8d4b5de712ffc0262c6d061e52c35bb8


    Headers

    Imports

    Sections

  • named-compilezone.ilk
  • named-journalprint.exe
    .exe windows:4 windows x86

    174cae0e72237b9595562b0ad827d65e


    Headers

    Imports

    Sections

  • named-journalprint.ilk
  • named-rrchecker.exe
    .exe windows:4 windows x86

    c9b3ece1711bf0db720a03bd411cb2a8


    Headers

    Imports

    Sections

  • named-rrchecker.ilk
  • named.exe
    .exe windows:4 windows x86

    0a84804dd9987e5b6919ec4914275499


    Headers

    Imports

    Sections

  • named.ilk
  • nsec3hash.exe
    .exe windows:4 windows x86

    293d53ba9d2da5e9fbced760d515ced8


    Headers

    Imports

    Sections

  • nsec3hash.ilk
  • nslookup.exe
    .exe windows:4 windows x86

    e5eee2e9f7cd3ba83a9509e10b73824f


    Headers

    Imports

    Sections

  • nslookup.ilk
  • nsupdate.exe
    .exe windows:4 windows x86

    3912f309d7f7ee1e69a6db8a76859602


    Headers

    Imports

    Sections

  • nsupdate.ilk
  • rndc-confgen.exe
    .exe windows:4 windows x86

    c530d58cc37ef1dfcac1d8f33b6c00c2


    Headers

    Imports

    Sections

  • rndc-confgen.ilk
  • rndc.exe
    .exe windows:4 windows x86

    baa4608ad4e179eded5d4c0d11eed56a


    Headers

    Imports

    Sections

  • rndc.ilk
  • tsig-keygen.exe
    .exe windows:4 windows x86

    2b0023ba128833071665b4b6d7711921


    Headers

    Imports

    Sections

  • tsig-keygen.ilk
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Code Sign

    Headers

    Imports

    Sections