General

  • Target

    3da9bdd2fb699fc1ca384bf5418d807aea64aba33e9da10d34b0c572e1e229a0.zip.zip

  • Size

    4.3MB

  • MD5

    40854cd7d80059fa42e43a3d1e3cc20d

  • SHA1

    1c1adf1b555a57dd3cae1ccf388a0dd84a8211c5

  • SHA256

    9275916f2aeea43fbb66e1abfd7f620175a85e8f9573fffd38cb35ce683e02e6

  • SHA512

    18791ad7f7aaf75de5db256e10c8571b55d6c0003ebc491b0a9eaeb2b5fd07fb7da35b15a77ae4f3b491fac0ac05b574ca0e644459e683efc8eace80168d67ce

  • SSDEEP

    98304:DIbJvSNED73EpyK7GpfRZ4XjcVPmFLI/z2Mf3WgOk41pK:DIbJaNgCynfH4X6PmFk/z2IHZ41pK

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

Files

  • 3da9bdd2fb699fc1ca384bf5418d807aea64aba33e9da10d34b0c572e1e229a0.zip.zip
    .zip

    Password: infected

  • 3da9bdd2fb699fc1ca384bf5418d807aea64aba33e9da10d34b0c572e1e229a0.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    5eaf18e3d2af69810b3ea3801073ef2f


    Headers

    Imports

    Sections

  • Bv9ARM.ch01.html
  • Bv9ARM.ch02.html
  • Bv9ARM.ch03.html
  • Bv9ARM.ch04.html
  • Bv9ARM.ch05.html
  • Bv9ARM.ch06.html
  • Bv9ARM.ch07.html
  • Bv9ARM.ch08.html
  • Bv9ARM.ch09.html
  • Bv9ARM.html
  • Bv9ARM.pdf
    .pdf
    • http://www.isc.org/services/support/

    • http://www.ietf.org/rfc/

    • http://Inc.couldbemail.example.com

    • http://named.pid

    • http://0.0.127.in-addr.arpa

    • http://224example.com

    • http://224eng.example.com

    • http://example.com

    • http://eng.example.com

    • Show all
  • CHANGES
    .vbs
  • COPYRIGHT
  • FAQ
  • README
  • bindevt.dll
    .dll windows:4 windows x86

    d811d71710ad58776155b7a8da1fa9db


    Headers

    Imports

    Sections

  • dig.exe
    .exe windows:4 windows x86

    12c5ff9c771ff8203484420766cd0057


    Headers

    Imports

    Sections

  • dig.html
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    085a813ee77a5acc70120ae0eb9c4c11


    Headers

    Imports

    Sections

  • dnssec-keygen.html
  • dnssec-makekeyset.exe
    .exe windows:4 windows x86

    11f2947396cf627ed6dca5492f902626


    Headers

    Imports

    Sections

  • dnssec-makekeyset.html
  • dnssec-signkey.exe
    .exe windows:4 windows x86

    6206e19db74fe7960ca99b081fe028ca


    Headers

    Imports

    Sections

  • dnssec-signkey.html
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    65e20b3155fca2c916be7f36c62d9e08


    Headers

    Imports

    Sections

  • dnssec-signzone.html
  • host.exe
    .exe windows:4 windows x86

    f6d5c848e5c2d42d3822a308a68a13b1


    Headers

    Imports

    Sections

  • host.html
  • index.html
  • libdns.dll
    .dll windows:4 windows x86

    f577ae687c6d1aa6661dfd8747c7f212


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:4 windows x86

    b1d578407206b9343e0beb2fc2a8680b


    Headers

    Imports

    Exports

    Sections

  • libisc.dll
    .dll windows:4 windows x86

    5ad7fd6f491b2c3c587cf288f446999c


    Headers

    Imports

    Exports

    Sections

  • libisccc.dll
    .dll windows:4 windows x86

    28a5c290095ce89ac8b6d61ab8f8e8b7


    Headers

    Imports

    Exports

    Sections

  • libisccfg.dll
    .dll windows:4 windows x86

    3043765ab3d136e4acc0f6ba66e7dd7d


    Headers

    Imports

    Exports

    Sections

  • liblwres.dll
    .dll windows:4 windows x86

    a87574f9d495e6eb74a29d35779224a4


    Headers

    Imports

    Exports

    Sections

  • named-checkconf.exe
    .exe windows:4 windows x86

    fc48f2055c8f256a6bc6c314490d3e77


    Headers

    Imports

    Sections

  • named-checkconf.html
  • named-checkzone.exe
    .exe windows:4 windows x86

    4b3452f533d0eb6ec20d6beafc0161db


    Headers

    Imports

    Sections

  • named-checkzone.html
  • named.exe
    .exe windows:4 windows x86

    a260dcca28a3ca20c4e5676813ddfcee


    Headers

    Imports

    Sections

  • named.html
  • nslookup.exe
    .exe windows:4 windows x86

    b4b1cfb87b0140d51b24066a73fe01b3


    Headers

    Imports

    Sections

  • nslookup.html
  • nsupdate.exe
    .exe windows:4 windows x86

    259340b3ea2e524da6820890968be379


    Headers

    Imports

    Sections

  • nsupdate.html
  • readme1st.txt
  • rndc-confgen.exe
    .exe windows:4 windows x86

    d47178312fe303f0852725412b73fb37


    Headers

    Imports

    Sections

  • rndc-confgen.html
  • rndc.conf.html
  • rndc.exe
    .exe windows:4 windows x86

    bd8ebcb9dcfcdc40a6a67dac64cd5c3b


    Headers

    Imports

    Sections

  • rndc.html
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Headers

    Imports

    Sections