General

  • Target

    Debug.zip

  • Size

    2.8MB

  • MD5

    bcf3c12b4e7e18224d6d220b0007bfe0

  • SHA1

    384d9eb33dd7b49235fdf2f3eeacb00b65917689

  • SHA256

    2b9e2bdeb348be368e9cafd06c15414bbe725af32a8c40ee56c3266db8a5b2a3

  • SHA512

    ea1b1100bf768659ff166d61cf33e2ba5bdeea2c4f13f3feddf8d78f0f327937ab875b2f922b305e4d40511c84bb3dd3f330be5fcb27cb73c44460b92161fbee

  • SSDEEP

    49152:y1Bt3Ii6i+chPwb56vkIwKIFdZyn+4pWpm380tZQuykvBQtjyaErxtffRTiTI98+:y1Bi5yP86sIwKAC3tZQ3kvBQtjXSzffh

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Debug.zip
    .zip
  • Debug/BulbaZ.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Debug/BulbaZ.exe.config
  • Debug/BulbaZ.pdb
  • Debug/bin/Xeno.dll
    .dll windows:6 windows x64 arch:x64

    3a1f9d973bff43051a3daf411f707362


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Debug/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • Debug/bulba.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • Debug/cver.txt
  • Debug/workspace/config.yaml