General

  • Target

    zilko.xdbot.geode

  • Size

    641KB

  • MD5

    14c571ece6ec3132876fbf3c72a4e793

  • SHA1

    b0e0518239965faacb805488731f207ea937b5c6

  • SHA256

    2626bc0b49796c36dd9dc55e0f9033c7cff6845745dc9e949304dcd0aabff447

  • SHA512

    e4ced2ee5f2d962434399c7918006fc1e8e1034110d3e06653e4803da7fc6735cb8c0de3240a74bbe27a774f76e75574595c4d4484b5e8df2f89f86b1553a61f

  • SSDEEP

    12288:X0mrSnG/SiidHdJ903otYdiw9Gjmx/H1IeCzf4dGyGMgNmdqqmiqj:2nGavL9hah9pRrGyGywiI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • zilko.xdbot.geode
    .zip
  • .geode_cache
  • about.md
  • changelog.md
  • logo.png
    .png
  • mod.json
  • zilko.xdbot.android32.so
    .elf linux arm
  • zilko.xdbot.android64.so
    .elf linux aarch64
  • zilko.xdbot.dll
    .dll windows:6 windows x64 arch:x64

    f4d8f66f4184a6b9ad508c255270c65b


    Headers

    Imports

    Exports

    Sections