General

  • Target

    fb3217dd8cddb17b78a30cf4d09681fc.exe

  • Size

    325KB

  • MD5

    fb3217dd8cddb17b78a30cf4d09681fc

  • SHA1

    e4c4f4c1812927b176b58660d2edba75d103a76a

  • SHA256

    12938790f91b2612b7c6a1fd4aa16219a7d2469731e27d4bbd409ad438e64669

  • SHA512

    4e37b8c6638c8c203fc2163be6014827a8c690506f50a8ec87022f7f5a74645f2c5bbcdfd7e0e75ec67775bc81887d6b094f08778c1f90c3909d46c8432344f4

  • SSDEEP

    6144:HWA32hLRlgI5qDnd8TZ6B3p3VsQ+V3lOfeodmpMuG6qFzP/+14VBqqnm10t3qYwB:HWA36tlgI5k/m4VBqwBre4YP7

Score
10/10

Malware Config

Signatures

  • Detects ZharkBot payload 1 IoCs

    ZharkBot is a botnet written C++.

  • Zharkbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fb3217dd8cddb17b78a30cf4d09681fc.exe
    .exe windows:6 windows x86 arch:x86

    86066554454deea625edb22af31c51bd


    Headers

    Imports

    Sections