General

  • Target

    ZeroBot.zip

  • Size

    11.2MB

  • MD5

    587a6bda206d5e232cd3ac41b40e6774

  • SHA1

    cb40d13e920266b664306ff9833c6980d489da4d

  • SHA256

    914410cfcdcde6320eee4425e8062432bd98eb85db154b896d6d15ed3be80824

  • SHA512

    9fca5cf1e7b5f988772b93a4c56586673b2c13856b7c942be94ead464364322822ee764eee003b8af775f6ca30d554ec853956342bd71e0c0331f31847ce8336

  • SSDEEP

    196608:QxBQvfJdU/CFDl0oH9+hfJ2KIUo7630TOblV3ItgLK7sbbbqBoLKw+ooxYfboLBi:QxiXjUKvJd+h0KIDVSbjSgGobbbqBwKa

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • ZeroBot.zip
    .zip
  • ZeroBot.exe
    .exe windows:6 windows x86 arch:x86

    e773ec819a7ebb60dd4f56e920013f0d


    Headers

    Imports

    Sections

  • ZeroBotLauncher.exe
    .exe windows:6 windows x86 arch:x86

    066e819a4e3dd37b3580a5ca0f3bc044


    Headers

    Imports

    Sections

  • clients.txt
  • data/ZeroBot.dll
    .dll windows:6 windows x86 arch:x86

    d8b6648b9e8334919f13dfbb5b367912


    Headers

    Imports

    Exports

    Sections

  • data/ZeroBotLoader.exe
    .exe windows:6 windows x86 arch:x86

    e863123efcba164a117838c4f64e050e


    Headers

    Imports

    Sections

  • data/core.zip
    .zip
  • client.lua
  • container.lua
    .js
  • creature.lua
    .js
  • engine.lua
  • enums.lua
  • game.lua
  • hotkeymanager.lua
  • hud.lua
    .js
  • inventory.lua
  • json.lua
    .js
  • lib.lua
    .js
  • map.lua
  • npc.lua
  • player.lua
  • sound.lua
  • spells.lua
  • timer.lua
    .js
  • data/sounds.zip
    .zip
  • Alarm Clock.wav
  • Disconnected.wav
  • Drop Item.wav
  • Full Dust.wav
  • GM Detected.wav
  • Local Message.wav
  • Low Bank Balance.wav
  • Low Capacity.wav
  • Low Health.wav
  • Low Mana.wav
  • Low Stamina.wav
  • Monster Detected.wav
  • Player Attack.wav
  • Player Detected.wav
  • Player Died.wav
  • Player Killed.wav
  • Player Killer.wav
  • Player Low Supply.wav
  • Player Stuck.wav
  • Private Message.wav
  • deps/libcurl.dll
    .dll windows:6 windows x86 arch:x86

    2329abac4cce05fefb445377060613c4


    Headers

    Imports

    Exports

    Sections

  • deps/libprotobuf-lite.dll
    .dll windows:6 windows x86 arch:x86

    4e9c9935694cd7152d0bd0c4afcae433


    Headers

    Imports

    Exports

    Sections

  • deps/libprotobuf.dll
    .dll windows:6 windows x86 arch:x86

    cc1a5461f1be3e93f432ee2e7b75a826


    Headers

    Imports

    Exports

    Sections

  • deps/lua51.dll
    .dll windows:6 windows x86 arch:x86

    29b380d76fe90d7a6816e14683c91506


    Headers

    Imports

    Exports

    Sections

  • deps/zlib1.dll
    .dll windows:6 windows x86 arch:x86

    9f31a4a1ad30ea434fc9edb2b671d02e


    Headers

    Imports

    Exports

    Sections

  • patch_addresses.txt
  • version.txt
  • version_addresses.txt
  • versions.txt