General

  • Target

    Nezur.zip

  • Size

    482KB

  • MD5

    48e6e6583a472a2fc732ccd863b41654

  • SHA1

    49e0171b6f9fc0d15e87bd6f566ed20c12482329

  • SHA256

    89f870ce7d6ad5cebdcf4244d691a5ce10e7ded37de70e8bfe2f5938bd5d7edc

  • SHA512

    c758018303a173fc8d15f5ae74b1a1992d62337e590e5953e240187d8489f803db03241664c649ed7f5b16169951da04f51bb6c3ddff37e61300ef92a879301a

  • SSDEEP

    12288:MfnGEHaNTSdU0Yz3jBL75xwc4XscIFl4zA6fzvBLakwRd:MfG5F4KjRdxwr81FlQxfDxak2

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Nezur.zip
    .zip
  • Nezur.bat
    .bat .vbs
  • auto_load.txt
  • configs/arsenal.cfg
  • configs/autosave.cfg
  • configs/counterblox.cfg
  • configs/dahood.cfg
  • configs/jailbird.cfg
  • configs/universal.cfg
  • configs/weaponry.cfg
  • lua51.dll
    .dll windows:6 windows x86 arch:x86

    9466a71df1d3a59794f8605626534abe


    Headers

    Imports

    Exports

    Sections

  • mscvcp140.exe
    .exe windows:6 windows x86 arch:x86

    d0264e200554ef617c521261fe8fe2a4


    Headers

    Imports

    Sections