General

  • Target

    19201044727.zip

  • Size

    170KB

  • MD5

    4011ec1c34905db7b02dd65979d1fa2b

  • SHA1

    51c120d1bc0c03f0a55487e8767e494f30965582

  • SHA256

    662e0212b6c54eb9cfdf396205177bedc38ceff2d3d5b9c0aa45bbea9dcaef33

  • SHA512

    3e5f56b89db50e831025294e84f4b067636388268f75cbea89f629d8d2515be650cea7fe20cee8e58016b4806d574061c9d5b6140611ebf4bf6a6eaf198206ef

  • SSDEEP

    3072:Wa4p31xr5kD4GSwbmLEpgJcxX5ztodnk72A8uQi6oxdlfllhu0akS0C0+WvcR37s:ip31xr5U4GSmmLE2g5OS7HtRjg0Bh3mk

Score
10/10

Malware Config

Signatures

  • Detects ZharkBot payload 1 IoCs

    ZharkBot is a botnet written C++.

  • Zharkbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 19201044727.zip
    .zip

    Password: infected

  • f203e00cfa3c0ff98670d56ace48c0ee7bf1a997309a8da1379d5291cbe37c3d
    .exe windows:6 windows x86 arch:x86

    Password: infected

    86066554454deea625edb22af31c51bd


    Headers

    Imports

    Sections