General

  • Target

    f649f8a7962be5372280b7d981a1ce4506a305fffa61c1c849d18152bb8c30de.zip.zip

  • Size

    4.4MB

  • MD5

    e22b40bf89fbf23a7001657fa311e6aa

  • SHA1

    064654fc352da2a0b76dde3e5cf6f8626c4851a1

  • SHA256

    5e1f0bcaf471afe076b7d07e45a95eb31dded5cd69cd83a6cea014bb2e3ce7c8

  • SHA512

    99a0c1ebcd1f322636551c9e269bbc71e358d48cb16574328868d3ede08bdb26a016c1b23ef579b02f863c0340f19f755cd4c05e9dbbd5a4a4348400221fcd46

  • SSDEEP

    98304:j58tfXWodRb+ybbBkvTBCTs+Vhl2INmcF6vfEjWOuT0SHPFivAr:j5WGYKXBCTbVxNLEESOuBUAr

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 22 IoCs

    Checks for missing Authenticode signature.

Files

  • f649f8a7962be5372280b7d981a1ce4506a305fffa61c1c849d18152bb8c30de.zip.zip
    .zip

    Password: infected

  • f649f8a7962be5372280b7d981a1ce4506a305fffa61c1c849d18152bb8c30de.zip
    .zip
  • BINDInstall.exe
    .exe windows:4 windows x86

    5eaf18e3d2af69810b3ea3801073ef2f


    Headers

    Imports

    Sections

  • Bv9ARM.ch01.html
  • Bv9ARM.ch02.html
  • Bv9ARM.ch03.html
  • Bv9ARM.ch04.html
  • Bv9ARM.ch05.html
  • Bv9ARM.ch06.html
  • Bv9ARM.ch07.html
  • Bv9ARM.ch08.html
  • Bv9ARM.ch09.html
  • Bv9ARM.html
  • Bv9ARM.pdf
    .pdf
    • http://www.isc.org/services/support/

    • http://www.ietf.org/rfc/

    • http://Inc.couldbemail.example.com

    • http://named.pid

    • http://0.0.127.in-addr.arpa

    • http://224example.com

    • http://224eng.example.com

    • http://example.com

    • http://eng.example.com

    • Show all
  • CHANGES
    .vbs
  • COPYRIGHT
  • FAQ
  • README
  • bindevt.dll
    .dll windows:4 windows x86

    d811d71710ad58776155b7a8da1fa9db


    Headers

    Imports

    Sections

  • dig.exe
    .exe windows:4 windows x86

    f641d042f2d05ca324319925b05ce471


    Headers

    Imports

    Sections

  • dig.html
  • dnssec-keygen.exe
    .exe windows:4 windows x86

    085a813ee77a5acc70120ae0eb9c4c11


    Headers

    Imports

    Sections

  • dnssec-keygen.html
  • dnssec-makekeyset.exe
    .exe windows:4 windows x86

    11f2947396cf627ed6dca5492f902626


    Headers

    Imports

    Sections

  • dnssec-makekeyset.html
  • dnssec-signkey.exe
    .exe windows:4 windows x86

    6206e19db74fe7960ca99b081fe028ca


    Headers

    Imports

    Sections

  • dnssec-signkey.html
  • dnssec-signzone.exe
    .exe windows:4 windows x86

    65e20b3155fca2c916be7f36c62d9e08


    Headers

    Imports

    Sections

  • dnssec-signzone.html
  • host.exe
    .exe windows:4 windows x86

    1e80be9e684745ae1a77039493f8482c


    Headers

    Imports

    Sections

  • host.html
  • index.html
  • libdns.dll
    .dll windows:4 windows x86

    ba5dd46ce8fa3f766389622f465ba34a


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:4 windows x86

    b1d578407206b9343e0beb2fc2a8680b


    Headers

    Imports

    Exports

    Sections

  • libisc.dll
    .dll windows:4 windows x86

    6018c5ba9e86d543929ca2696641b88c


    Headers

    Imports

    Exports

    Sections

  • libisccc.dll
    .dll windows:4 windows x86

    28a5c290095ce89ac8b6d61ab8f8e8b7


    Headers

    Imports

    Exports

    Sections

  • libisccfg.dll
    .dll windows:4 windows x86

    3043765ab3d136e4acc0f6ba66e7dd7d


    Headers

    Imports

    Exports

    Sections

  • liblwres.dll
    .dll windows:4 windows x86

    0886bae705885afb5f9ac104a3cbe1b0


    Headers

    Imports

    Exports

    Sections

  • migration
  • migration-4to9
  • named-checkconf.exe
    .exe windows:4 windows x86

    fc48f2055c8f256a6bc6c314490d3e77


    Headers

    Imports

    Sections

  • named-checkconf.html
  • named-checkzone.exe
    .exe windows:4 windows x86

    4b3452f533d0eb6ec20d6beafc0161db


    Headers

    Imports

    Sections

  • named-checkzone.html
  • named.exe
    .exe windows:4 windows x86

    a260dcca28a3ca20c4e5676813ddfcee


    Headers

    Imports

    Sections

  • named.html
  • nslookup.exe
    .exe windows:4 windows x86

    64a601d37c5bbcb8e9b64b415aa3d21a


    Headers

    Imports

    Sections

  • nslookup.html
  • nsupdate.exe
    .exe windows:4 windows x86

    6fecabec90afa4828c0194344698a998


    Headers

    Imports

    Sections

  • nsupdate.html
  • readme1st.txt
  • rndc-confgen.exe
    .exe windows:4 windows x86

    d47178312fe303f0852725412b73fb37


    Headers

    Imports

    Sections

  • rndc-confgen.html
  • rndc.conf.html
  • rndc.exe
    .exe windows:4 windows x86

    bd8ebcb9dcfcdc40a6a67dac64cd5c3b


    Headers

    Imports

    Sections

  • rndc.html
  • vcredist_x86.exe
    .exe windows:5 windows x86

    0ebb3c09b06b1666d307952e824c8697


    Headers

    Imports

    Sections