General

  • Target

    17300406664afe7aec458893633a7734ab1b119dd638ebaf863f6f65e2e732ab9f2f071556149.dat-decoded.exe

  • Size

    326KB

  • MD5

    ab47202cd4ca44239b833fb5a8486e17

  • SHA1

    626c43a0610f5b29759d13c406e4ec1f98bb9134

  • SHA256

    e0eb0682d9fb24f1f68bc50aac2b9fc9e2f933b8a2d1c91ce1ea06d3a2424764

  • SHA512

    6822d5712790ba76d0edae1b844d45f019937a58db1da44238ed13c7d15f4619185ce65e5d45c8628b1877656f180fb87ecb67907103184733e85078d5d04248

  • SSDEEP

    6144:BZKik350cDSIUAwwEcgOYsEswNG30s6Zkku5SeT5B1p7DEPnVeRMn25IK9BgSVvs:BZKiy6cDSIHGnVeRptvQraHEh

Score
10/10

Malware Config

Signatures

  • Detects ZharkBot payload 1 IoCs

    ZharkBot is a botnet written C++.

  • Zharkbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 17300406664afe7aec458893633a7734ab1b119dd638ebaf863f6f65e2e732ab9f2f071556149.dat-decoded.exe
    .exe windows:6 windows x86 arch:x86

    86066554454deea625edb22af31c51bd


    Headers

    Imports

    Sections