Overview

overview

4

Static

static

4

BINDInstall.exe

windows7-x64

1

BINDInstall.exe

windows10-2004-x64

1

Bv9ARM.ch01.html

windows7-x64

1

Bv9ARM.ch01.html

windows10-2004-x64

1

Bv9ARM.ch02.html

windows7-x64

1

Bv9ARM.ch02.html

windows10-2004-x64

1

Bv9ARM.ch03.html

windows7-x64

1

Bv9ARM.ch03.html

windows10-2004-x64

1

Bv9ARM.ch04.html

windows7-x64

1

Bv9ARM.ch04.html

windows10-2004-x64

1

Bv9ARM.ch05.html

windows7-x64

1

Bv9ARM.ch05.html

windows10-2004-x64

1

Bv9ARM.ch06.html

windows7-x64

1

Bv9ARM.ch06.html

windows10-2004-x64

1

Bv9ARM.ch07.html

windows7-x64

1

Bv9ARM.ch07.html

windows10-2004-x64

1

Bv9ARM.ch08.html

windows7-x64

1

Bv9ARM.ch08.html

windows10-2004-x64

1

Bv9ARM.ch09.html

windows7-x64

1

Bv9ARM.ch09.html

windows10-2004-x64

1

Bv9ARM.ch10.html

windows7-x64

1

Bv9ARM.ch10.html

windows10-2004-x64

1

Bv9ARM.html

windows7-x64

1

Bv9ARM.html

windows10-2004-x64

1

Bv9ARM.pdf

windows7-x64

1

Bv9ARM.pdf

windows10-2004-x64

1

README.vbs

windows7-x64

1

README.vbs

windows10-2004-x64

1

bindevt.dll

windows7-x64

1

bindevt.dll

windows10-2004-x64

1

dig.exe

windows7-x64

1

dig.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8c7ed8a00b34fed1697a03313c2eba382d22adfb06ac30580ba5a42877407e57.zip.zip

  • Size

    4.7MB

  • Sample

    231107-q4kacafb6v

  • MD5

    50989ca752c10a91716d39337ad8eb4d

  • SHA1

    a88c4ffdcb1ff26f2dad3f4909c0c058047674e1

  • SHA256

    67019e6d5d75036d311f14af8f9ab39afa20b565c541ee35c89cc7d34f0eb7b9

  • SHA512

    3837c2047d9947aef4c24733794f23416e507c7f4b4319fa1e31eb47a3fbc0d223eff8ca5031f5435cc8e52a0ec4bccf65d95df8b08c290b780e124cc7f70f85

  • SSDEEP

    98304:V/s7kUOBENxi1x+Lv7HlTf40nX4HtLRSpdiy5BJk+WN3Oe:V/suXx+LjO0XpdX5BG+A3D

Score
4/10
linkpdf

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      240KB

    • MD5

      e6fdc630706d21f95d50ffa06f38cfe7

    • SHA1

      2e2ffb65ff6285caaa07c32bd2d8941c7fae5f6f

    • SHA256

      3a22f59760f2fcc7bc208a7c9300b966e2772541a5bba2de8d1b0b3111e9d7b0

    • SHA512

      a0b1cccb573b06a2cf0c6e75c635de05383d51f7ec3e5a233c088880d1b1bca0477de42888c05623c91349880cdbd5086d854f9e9cb266e4fbe3f6b280851aef

    • SSDEEP

      3072:PGP3+tFLQZ4oQ1sj4Rg4lkuiPoAYbjrmZXbISNLYuPhsP59tkltfQJstWoyjET/P:6qFsin1sj4Rg8kxoA+yLISNL65AJ/yY

    Score
    1/10
    behavioral1behavioral2

    • Target

      Bv9ARM.ch01.html

    • Size

      24KB

    • MD5

      b3626174793db1c843cc717de5735efc

    • SHA1

      54d7e0ba25672bea477366b202f8f1c36184cc97

    • SHA256

      ecdd3b6f11ef8a11c647b927bdeee20894242c258396048aa2225eac7fe47a76

    • SHA512

      f85861059285c5f3db08efd4ebce9c27c5caec82859f907d84892466fad83292c67a4e1f467d087df09fa3bcb0fe60e3895380ec4221672e0a9aa6607c2b65fd

    • SSDEEP

      384:zvOtFYNnL7TYbBGlz15NvgOOZJT1l+CnsZ86gxGpj8W:zOcjWG7+ZJiCnsZWghJ

    Score
    1/10
    behavioral3behavioral4

    • Target

      Bv9ARM.ch02.html

    • Size

      7KB

    • MD5

      321682a8fad982fe953f04020020e0d8

    • SHA1

      102515eed7f7076c4213b58c7765a23e3c1f8088

    • SHA256

      4109a7348b3f1b7d3653e37f1b640d587bc84183f759ff97cdd8beec65a51488

    • SHA512

      a51a37e2e0c188afcb2b3d789b3693855dd9b46bfc30fe5794dd92fe2ed8f186b956383648a36fcf3e37c82b2909f4d982c46b9804b2b0168b1c6a4cf1bfb369

    • SSDEEP

      192:zvOH1QlNSgqkDqjDG3mmGDdrvvI16wU2Ugl/EnzTRPnV3uuFm0:zvOVAYjFLShQdPJ

    Score
    1/10
    behavioral5behavioral6

    • Target

      Bv9ARM.ch03.html

    • Size

      37KB

    • MD5

      0f446f0d6a26e23849dcf0bc4748bdbd

    • SHA1

      60b9de8b0d0c3b5420478b1a3d5f58ea5bfc6364

    • SHA256

      e8128394eaa5a5a0392a0cc0f2d5020823406c7b5ee31940c1abf5b7a8e7a41b

    • SHA512

      fa0b7992a380921688b45aaf8ad870b0eb91d1871743b652983a3c0acfa165af4a3c522c002af0f8c811d3fb896397bf218495f528c0c3aa801d92ef41f17e58

    • SSDEEP

      384:zvO3dYSL/tN6UxUIbdjSO7vzpkjLTq7af8GeGDg7FIRwkq/hWYGMkhERr4qVo:zORt/x7bdjxvijhf8GemgL1hRr4F

    Score
    1/10
    behavioral7behavioral8

    • Target

      Bv9ARM.ch04.html

    • Size

      47KB

    • MD5

      634418b87c778f1e2744a047e807f458

    • SHA1

      e521a997f1b6595c7a886abb13f5e303441ee767

    • SHA256

      391c8a54b5f5c73b925de0afb1a5a90551985c95a76a5d16ebf5b53a382a8cd8

    • SHA512

      bbff8d7ea724fdf7aeb5e24db7e213f934916d01a9e9c24f3fa96042f8ac02e95a3224c73ae79674542e1a5b7ba4c1a790b3319cd1b4735be04d468fc9d104ae

    • SSDEEP

      384:zvODI3YRh8Fjo1UjerkQShQEE6PIT/9Y0N98jAqaDpA5Ept4fwkL+IFx3+injEsn:zO2G1UVQn6k/hpFfEDnwcxDipm

    Score
    1/10
    behavioral10behavioral9

    • Target

      Bv9ARM.ch05.html

    • Size

      6KB

    • MD5

      77d9ea376ee3a50626104a568245c6ed

    • SHA1

      68b33aedadd3f86c3df60176c32f95e3c1a80893

    • SHA256

      a30d9dc9adbb8cb6c67adcac477877d87fa0c9b3ceca2cd3a6cc854e957f1938

    • SHA512

      6a21b4c111db1cc67326741f93ffff848b1526225cbc1c6a177ec2ded0c672ec4fdbd7d80a6f323b91feba257306f20bcc239c84aa1ca0d698216cbae50d2b0f

    • SSDEEP

      192:zvOHd4cNSpnfiMSkKZHlyK6Qar08+jg4gY0:zvO9vYkw4H8Qi4C

    Score
    1/10
    behavioral11behavioral12

    • Target

      Bv9ARM.ch06.html

    • Size

      346KB

    • MD5

      0896ec84ff0910a95e411738f49181d0

    • SHA1

      beb43e72e736af464a04dcef8a1698ef7f4c050e

    • SHA256

      82105f3a2848e5a19f5e6113120ebed99587ce761272af8049f77e0fc4b0ceaf

    • SHA512

      f9649edd5c88bb1c0c0ebc459eb91dd467faf5cf546434d76758bd7b1436d92b38ca80668b56066390165073800fb73da95862d403cbc4e24d577155cbee0148

    • SSDEEP

      3072:zunND3SG6F72KIHbKMuv/yLqSLd3QLVeLFVGCyi5RP6:z+M7eqS/VG+5RP6

    Score
    1/10
    behavioral13behavioral14

    • Target

      Bv9ARM.ch07.html

    • Size

      12KB

    • MD5

      3d888a6e2dc0b40ee4f37beaa38ecaa0

    • SHA1

      bd661513c6d8d9ed683161976ece52ddc53f11fb

    • SHA256

      a8c5372ba59cd540e37394c191addb9e3e5635244d3aecbd3a4e6a8d6d794c80

    • SHA512

      73fad514dfae68976c9b3d60d5746b25668ae409a4edee26a70a1fd4b627c35704f87d1bea23475db74784e0e1d6534fdc8b49c33de007776ad1a7d6d3c5f3d3

    • SSDEEP

      192:zvOHp1FNSMuoTzhbO3/srrrjci9h6ByDrK9hY0PkmP+YCBF0:zvOJrYO+/sr3h7hOPqm

    Score
    1/10
    behavioral15behavioral16

    • Target

      Bv9ARM.ch08.html

    • Size

      6KB

    • MD5

      ccda0a727af6ac21c8dd02af319b9d23

    • SHA1

      5e2056ab2e6e83b91db1f16ce0a806d0c012771d

    • SHA256

      2342812446cecb107aea11cbc1edfe2eee5647c963752885d3fb25ec97502a9f

    • SHA512

      19e672ae8737e4f89f4e85680acc245c509c93aafd3183612d5d22333a3fa344fb9384f507a6c398f7d472f993c34d98028bd45b3f81cdcc4eba0a546a2b7277

    • SSDEEP

      96:yAvOHe5dw4P0VVoIJNaLga+AK3fmeeXw3DP6eceXteJ3NedL3n2AedmgonFPmnFG:zvOHNDJNSigwyNDmXFmyGivN80

    Score
    1/10
    behavioral17behavioral18

    • Target

      Bv9ARM.ch09.html

    • Size

      49KB

    • MD5

      83a0eb0e238446c0c76d5999b4c193e7

    • SHA1

      15745e93093d196bbb3fbb0bcc941921d1e9e95b

    • SHA256

      f585299e27c047c302aa8f51302a9627e00465fb6aeb6d66d1e7f40cc4a39bf3

    • SHA512

      070eeb947cf96fb4ecd83aeb5b08a5b6e9eebc454a971b040f8e9d1ccd239a897cf3ff6e7adee07e70fde6aefa137d42970d7c6ae37aa6d17f2ebb597c461b11

    • SSDEEP

      384:zvOpaYtehx4U3zK1siN8I35lKDYSjOFWJaaIdvHpa+vRMEKbxNUPGGZnmBvGlKR:zOqIUS6I3mDDJT+v5UUeSg

    Score
    1/10
    behavioral19behavioral20

    • Target

      Bv9ARM.ch10.html

    • Size

      4KB

    • MD5

      868d64a6e421339b195ecc3810f72f64

    • SHA1

      e7d822a3fe5a32fd933b37e18267d92fa812e25a

    • SHA256

      493e571ce5f9f3d4a673d827433f53ad879bd7c710006a7b6784e375c84ea602

    • SHA512

      26e095a1c87972c1a2e62475581dc04a65baec89997452e7f3f194989f52979aba40f7ca11578accdb6d7744f6c0460aae010fae0af72688aa9616ed907657ed

    • SSDEEP

      96:yAvOHe5J0Rw50VV2yNaLgAAKyfdytKQJ21JUC/bV+qmWzNawAiaTvilgBfHU:zvOH009OyNS28tB21fD5Ty0

    Score
    1/10
    behavioral21behavioral22

    • Target

      Bv9ARM.html

    • Size

      17KB

    • MD5

      c587925aad2e17666456a47543de7dc7

    • SHA1

      666b42cf915b405c49b5046d7fc6691ad4c4fa06

    • SHA256

      0119e7492305ac1814d0837ca92d3922ccf277241ee9045d4647a550d52e3042

    • SHA512

      84884f406882e9bd1ee6128cbfac47d067ba21ce9cc1e3f4d645f2a52392760ac4d58b17b147e2e10681084350873e68f148fde9fc1c07aa1e1fada030fbd3e4

    • SSDEEP

      192:zvOHyepNSpK8TXIp5L72j9Grwy7tzkept9dhs+SBObB21fD9z0:zvOS0YwYXInL7EbepkFDS

    Score
    1/10
    behavioral23behavioral24

    • Target

      Bv9ARM.pdf

    • Size

      705KB

    • MD5

      a8ad55ecb3b1192308e84aad7d9b3c6a

    • SHA1

      08fad224fb4d048bb10b6b6062e78684a860090f

    • SHA256

      afbf7a74224889a6c3a8d4c6834a955129f90f5a2854ffe47643aed34c71ef22

    • SHA512

      2b6f5ff84d22e6a832c602e58594c189fe0310b80c859b1659da42304813a6c56b9d1d065152218c98104486ea28be9d5c640165ff7ce6b9a612468559ef647c

    • SSDEEP

      12288:Er1ACS31dmF+GPx9MtODo/B4nA3QFVwXcHHOjQEaIXM9U6COqQXM4jSx:Eq31dg+avP6s8OVEcHHOsQ89U6XpK

    Score
    1/10
    behavioral25behavioral26

    • Target

      README

    • Size

      18KB

    • MD5

      6008d032fb670fe13ce3cc2729662902

    • SHA1

      7225d9148861a2cacfb678a507188ef70e3dcc83

    • SHA256

      f7cf1a52ce037c8bfa913ac0f1b5528a72f9940d78f18c5acbe88ab6b551db6d

    • SHA512

      6a2f8410a7625ed0a5ff2aae2190e49a47f0358efee874e5238921a8be446ea0c91b15e2a175488de77a985f98772120a7ae01765283939bd6facc6db6549acb

    • SSDEEP

      384:c+dLjb/i/h6SPbSFac4MgWCbB2ef6kWuTIDsn1n:c+Bjb/utzYEWOQtkWuUDsn1n

    Score
    1/10
    behavioral27behavioral28

    • Target

      bindevt.dll

    • Size

      52KB

    • MD5

      358523e06af9c926c2e2925669d79bb6

    • SHA1

      d0997eb665f876f9dba18a1f7a89d227aa05ed6a

    • SHA256

      e6fb450c3093b0bb0c9372e05802a94290eefe7001d847d4fbf5a67885a5d9c3

    • SHA512

      0c694b25d4288a44a048976802139a6df45dc5ea62f85730218e84ee412787a4c200868a9dca13395daddada9d4308b731c906f24c12a869654a7edd580b07e5

    • SSDEEP

      384:Pk9TQsp/0zj3OAPV78tt7l3d0TTwMsKm6jRQnX6MojQWSRkLc0RaPV+8r277eubs:PeTQsio0Zmj3WSRewPVpui/dVtDe

    Score
    1/10
    behavioral29behavioral30

    • Target

      dig.exe

    • Size

      72KB

    • MD5

      a7506749ac9cb52454093dc016305ddc

    • SHA1

      a1153e30dddc96254ce8d81441d0b1083cde9b7f

    • SHA256

      2b419f3598866be6e79a717a1dbbab14a1a3dde125c76c3535910b6eff7dfe5c

    • SHA512

      added4b4acc540cc53ee6fb4e1ce2c3e5bd83d0c235ba2475031a4a2e7bd72ff5f2cee45fbf7e97707b0bc61b7517acc1f07da0bbbe5a890f64cca45663b5339

    • SSDEEP

      768:209u5dKh5IlKcSmn2n9gpK9HilmCUmURcjlaAM8HJiq7nrc37yGVbKxww/S1qv02:28Bjj1nSXUR/pPq7no3mkrJ1/gTgkWzy

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks