Overview

overview

7

Static

static

7

avz4/avz.exe

windows7-x64

7

avz4/avz.exe

windows10-2004-x64

7

avz4/avz.url

windows7-x64

6

avz4/avz.url

windows10-2004-x64

3

avz4/avz_en.chm

windows7-x64

1

avz4/avz_en.chm

windows10-2004-x64

1

avz4/avz_ru.chm

windows7-x64

1

avz4/avz_ru.chm

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    avz4.zip

  • Size

    9.6MB

  • MD5

    736146ec6bc2e95fc295b0462fdd68f7

  • SHA1

    9b5a57365e836ac55b512f8eb237ed548e85456b

  • SHA256

    a7e935ab86aebcf9f16496055a490f9f58f1ef76761aa0366420f49b209d9c6e

  • SHA512

    3cde68968cc1c99612275ee59df51f3493a76f5b9d5a204a46cede51e8fe1121e2681e436ab469b2dbacbca8574496b3c6d268450432290ff3c453ef6f55d135

  • SSDEEP

    196608:UXaV5JFwJLsClsvSphewNFOCb4UGtHAyZlHKxXKzLfJ340mYt0zdxlDyQyO4q:SmawvSawNFOLUGiilqxXKz9o0z0JDyOF

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • avz4.zip
    .zip
  • avz4/Base/backup.avz
  • avz4/Base/bt.avz
  • avz4/Base/esc.avz
  • avz4/Base/exc.avz
  • avz4/Base/extract.avz
  • avz4/Base/keylogger.avz
  • avz4/Base/krnldrv.avz
  • avz4/Base/lang_en.avz
  • avz4/Base/lang_ru.avz
  • avz4/Base/main.avz
  • avz4/Base/main001.avz
  • avz4/Base/main002.avz
  • avz4/Base/main003.avz
  • avz4/Base/main004.avz
  • avz4/Base/main005.avz
  • avz4/Base/main006.avz
  • avz4/Base/main007.avz
  • avz4/Base/main008.avz
  • avz4/Base/main009.avz
  • avz4/Base/main010.avz
  • avz4/Base/main011.avz
  • avz4/Base/main012.avz
  • avz4/Base/main013.avz
  • avz4/Base/main014.avz
  • avz4/Base/main015.avz
  • avz4/Base/main016.avz
  • avz4/Base/main017.avz
  • avz4/Base/main018.avz
  • avz4/Base/main019.avz
  • avz4/Base/main020.avz
  • avz4/Base/main021.avz
  • avz4/Base/main022.avz
  • avz4/Base/main023.avz
  • avz4/Base/main024.avz
  • avz4/Base/main025.avz
  • avz4/Base/main026.avz
  • avz4/Base/main027.avz
  • avz4/Base/main028.avz
  • avz4/Base/main029.avz
  • avz4/Base/net.avz
  • avz4/Base/neural.avz
  • avz4/Base/neurald.avz
  • avz4/Base/neurale.avz
  • avz4/Base/neuralm.avz
  • avz4/Base/par.avz
  • avz4/Base/ports.avz
  • avz4/Base/prt.avz
  • avz4/Base/repair.avz
  • avz4/Base/rootkit.avz
  • avz4/Base/scripts.avz
  • avz4/Base/scu.avz
  • avz4/Base/signf001.avz
  • avz4/Base/signf002.avz
  • avz4/Base/signf003.avz
  • avz4/Base/signf004.avz
  • avz4/Base/signf005.avz
  • avz4/Base/signf006.avz
  • avz4/Base/signf007.avz
  • avz4/Base/signf008.avz
  • avz4/Base/signf009.avz
  • avz4/Base/signfusr.avz
  • avz4/Base/syscheck.avz
  • avz4/Base/sysipu.avz
  • avz4/Base/tsw-auto.avz
  • avz4/Base/tsw.avz
  • avz4/Base/update.avz
  • avz4/Base/vse_ru.avz
  • avz4/avz.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • avz4/avz.url
    .url
  • avz4/avz_en.chm
    .chm
  • avz4/avz_ru.chm
    .chm
  • avz4/version.txt