General

  • Target

    0a18067c173a7c4bdc24b8d3a847814b30733cecfdcc305c431a3d1fcc322536.exe

  • Size

    330KB

  • MD5

    61547b701d759958b78b75aeca77279c

  • SHA1

    21e5b345bdcaaeadf6df1359f805f63aafabe223

  • SHA256

    0a18067c173a7c4bdc24b8d3a847814b30733cecfdcc305c431a3d1fcc322536

  • SHA512

    f65d898c13b09bd5f1102ad95e68d5b9982214a53d5a13db12cf287468d1740cfccee407d27534331c29f21705b8fed8b3bfecdda49224f2b9e33364392aaa1c

  • SSDEEP

    6144:BWJUabt49fYu/XXgjG4vXhzHoPvOUk/Y6rDxNF1BEz5NEV8MS46SS5kiO0gIzxCV:BWJU4iqIPvOy0jIzxCufzv2zWMrFr

Score
10/10

Malware Config

Signatures

  • Detects ZharkBot payload 1 IoCs

    ZharkBot is a botnet written C++.

  • Zharkbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0a18067c173a7c4bdc24b8d3a847814b30733cecfdcc305c431a3d1fcc322536.exe
    .exe windows:6 windows x86 arch:x86

    89d186e701948ed4026afa52bc6342f0


    Headers

    Imports

    Sections