General

  • Target

    f203e00cfa3c0ff98670d56ace48c0ee7bf1a997309a8da1379d5291cbe37c3d

  • Size

    326KB

  • MD5

    3663c34a774b45d65edb817e27dcbdae

  • SHA1

    4e9333fbdc6540bc312f6b324df9eb7dafedde2e

  • SHA256

    f203e00cfa3c0ff98670d56ace48c0ee7bf1a997309a8da1379d5291cbe37c3d

  • SHA512

    88c4939f5c2613e7fa62040d3307f9fc0c2f2e0bae4c7c166d5fb6ee6b921c99636dc89935b31c60d4ba45afd5ebdd80ba51914cb37e9e2a604781de89e45c05

  • SSDEEP

    6144:Uypo5x1dkBovN2s0GGDwmW9pLbLGou5YLQRjpj3xm3Z9F+MEuMBoSVGLJnt2QE92:Uypo5eBovNguMGSVGLM7uXjazj6AE+W

Score
10/10

Malware Config

Signatures

  • Detects ZharkBot payload 1 IoCs

    ZharkBot is a botnet written C++.

  • Zharkbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f203e00cfa3c0ff98670d56ace48c0ee7bf1a997309a8da1379d5291cbe37c3d
    .exe windows:6 windows x86 arch:x86

    86066554454deea625edb22af31c51bd


    Headers

    Imports

    Sections