General

  • Target

    Win32.Avatar.zip

  • Size

    118KB

  • MD5

    b26a58fe73560793831182e0beb94103

  • SHA1

    7d05d9a807e4e8fbe64c917614af2cd7d821ff33

  • SHA256

    38eb90d78a838741cc719e9bc967e735b59264ea31b1abf5cede92f9175114cc

  • SHA512

    79c3846f8995c3561b013c48a644107c88a431f56681e138ef675165e5e3f4b3efc72a4b7afd2ca98e6fcf43762d26ec16a4f688ea72e8a164ad017449ad4937

  • SSDEEP

    3072:mVOyqkbaFFeHGxRfgNsdjXWDKZ5pZ3D+8+DN:mkLFAHIfgNsdTWDKZR3DHA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Win32.Avatar.zip
    .zip

    Password: infected

  • Avatar_Rootkit_NETbotnet_32d6644c5ea66e390070d3dc3401e54b_unpacked
    .exe windows:5 windows x86 arch:x86

    e119b107e7442814a9853c4b22677273


    Headers

    Imports

    Sections