Overview

overview

3

Static

static

3

BINDInstall.exe

windows7-x64

1

BINDInstall.exe

windows10-2004-x64

1

bindevt.dll

windows7-x64

1

bindevt.dll

windows10-2004-x64

1

dig.exe

windows7-x64

dig.exe

windows10-2004-x64

dnssec-keygen.exe

windows7-x64

dnssec-keygen.exe

windows10-2004-x64

dnssec-signzone.exe

windows7-x64

dnssec-signzone.exe

windows10-2004-x64

host.exe

windows7-x64

host.exe

windows10-2004-x64

libbind9.dll

windows7-x64

1

libbind9.dll

windows10-2004-x64

1

libdns.dll

windows7-x64

1

libdns.dll

windows10-2004-x64

1

libeay32.dll

windows7-x64

1

libeay32.dll

windows10-2004-x64

1

libisc.dll

windows7-x64

1

libisc.dll

windows10-2004-x64

1

libisccc.dll

windows7-x64

1

libisccc.dll

windows10-2004-x64

1

libisccfg.dll

windows7-x64

1

libisccfg.dll

windows10-2004-x64

1

liblwres.dll

windows7-x64

1

liblwres.dll

windows10-2004-x64

1

named-checkconf.exe

windows7-x64

named-checkconf.exe

windows10-2004-x64

named-checkzone.exe

windows7-x64

named-checkzone.exe

windows10-2004-x64

named-compilezone.exe

windows7-x64

named-compilezone.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    c3137125a6a634ece78acca265d58929c3414bca8cd5789fd5e1ef2f496974bb.zip.zip

  • Size

    10.8MB

  • Sample

    231107-q4wy5sgg42

  • MD5

    cd926a3fa3a9a8e00c5dfa827d82a227

  • SHA1

    6ee611131109414854e64a3c11bfb665dec0d561

  • SHA256

    184db53cf8264b6d5c6f7fd61c100db8b8b963b5ea549659eed0342b586f9459

  • SHA512

    df669f6c96334a406ad8ac2b4886da180858c731495d0539e4176144adaa067d1fc1640133ca24e098f3b01357104b2634adced3e2c4d9b69e561b920a805fde

  • SSDEEP

    196608:CtefrYNe/OlGb/EjMWFhMMAQdMxZXG5fcDD6BF9NBO6yp12BI:ScYN+3b/EjPFmtSMPXGGwhe5

Score
3/10

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      2.1MB

    • MD5

      5ce8ecf0bbca66dd25681f8f22b897e8

    • SHA1

      708e429cd63d208917ede7c531a9adbf9ab68dd3

    • SHA256

      26c6e7695c7d13955ed81255ca813d0ff6e456788aa4f44a24f7d5f8e4f22e1b

    • SHA512

      2c45bc12e94a24c3d9d9cfa5582193a80d3bb15c416dc43dc0740cf5d8f292c9d62fae2f6ebf0ec3b3e64ff088dd00a58a0efd092dc5f2c6aebde0b5d3959741

    • SSDEEP

      24576:Ozk3zKwBEYNbqIJe+sHsubWKGiNtr9x3mwbTzMoQXUqxv:Oz6z3L/AmgDFT5q

    Score
    1/10
    behavioral1behavioral2

    • Target

      bindevt.dll

    • Size

      448KB

    • MD5

      518f3c130119036d76d2ca075d4c0ab9

    • SHA1

      b759a2884848b336ee27e2aa3cd90879ff7df8ba

    • SHA256

      dc3ec0c2eab84104d71fa1ad6a857a05c5bb9c07bad4ab1620fa8292f0a5ad49

    • SHA512

      59fe55dc41a9cc67abb286dafd153632f85b1c64e96f98928b151847b265a73a1521653f685566b0c9d9a0afb9d431a9bfb39c4a0a4fc8e5facf585098b1f56c

    • SSDEEP

      6144:sLyto9KMLecTR/bsUpbm97VQ8873FKBkDORsnb6ZYoZQdHiVXj:sLKo9PLecFTsU9m9E73FSRsnb6HGIj

    Score
    1/10
    behavioral3behavioral4

    • Target

      dig.exe

    • Size

      136KB

    • MD5

      7246cbe0d9e91cb12e1d6a2000129455

    • SHA1

      c9c9030b9efa912a29442f9ea74542e77721828b

    • SHA256

      9ebd807c0d471b21fb16ee216cbb010f4474678b82066aa40aeca9e43fc6e424

    • SHA512

      5c30568dc81580b70c36fbcdc69141c584b99707b12e58d7aac93a37e29d43a6129ab95a154940761239e75fc2520d843a2e911dd0666c6b8d1aed92b5c5c4a0

    • SSDEEP

      1536:dsiEdJS3QXm5v8OwkOdYiCejcdy9vF2/JQSXQlP3qWXDabmUW4BM:dQS34rdvjcUvF2/Wl3qWXDabmUW

    Score
    1/10
    behavioral5behavioral6

    • Target

      dnssec-keygen.exe

    • Size

      60KB

    • MD5

      8329414dcbefbf46deb4c896916c72e6

    • SHA1

      293e09fb86381499281bac8e1d64696f47c0074a

    • SHA256

      7c83d595605f9f17c97be2681ee61ac42d69c570e230c182e4cc29fff471ed43

    • SHA512

      8298e9359e40e5fd782fb44a82b5d8d1595e334d2231ac5e27617ea337a9d4fc972477107d63642ea4fdd7d85b1e70b7703eb06160b5d872a09bf449a61e61d0

    • SSDEEP

      768:XLqB7dmt4G6tzn74DfnvezW7t1ImULYXwP:7q9hU717t1ImULYA

    Score
    1/10
    behavioral7behavioral8

    • Target

      dnssec-signzone.exe

    • Size

      96KB

    • MD5

      4298704e1eab210da2b626f0fce86dab

    • SHA1

      e6985d847e0ddf846b7e9b4f0e5b514f6f71fcb8

    • SHA256

      fdd1ba59f4e7689e68548e7910a5f660850096dbb05873da8f613f093b1f8284

    • SHA512

      d750235c7eb3ecc28504a5f7826032739d79ea574dbc8f418fe25519166f15106d84c8c8453077ce45e4fc0ec4f17fbb57baa79e6dc09133c5d16e858a9ace5b

    • SSDEEP

      1536:omgeKmkd7kw53G1YjiYS3kLuaFdhHGUcu:oX1Sw5jzSULuaFdhHGUc

    Score
    1/10
    behavioral10behavioral9

    • Target

      host.exe

    • Size

      120KB

    • MD5

      395575b84b33997d8a8eb861ac29f9a6

    • SHA1

      26bb07f8385bf3ccc407e445f68b23bb4628cb2e

    • SHA256

      e27ccee4ac2ad288fb7630b6e417f0c880288d757e2abe2e561298c6f70e2c23

    • SHA512

      78a3dab3b8b251fde18cc3d6327d67398e7ab3a59a443f7439ca188a2e99641484a39f8724565d3618600037da47abc640c1ff6f1edcc2087f41f57979f376f1

    • SSDEEP

      1536:nqBdpUJUJ2qhXBn9kQlxE83RIfzDdWXDqVGUtfPCS:Q4U8MR9kQlbCLDdWXDqVGUtfPC

    Score
    1/10
    behavioral11behavioral12

    • Target

      libbind9.dll

    • Size

      84KB

    • MD5

      ee500a0cf7686b4f2e78ef7b637479fb

    • SHA1

      48c10655492c85479e3669ddc850d7c8cfbe0226

    • SHA256

      635e80cc0f541a285eae99c366f91fd793e6528d0be8c09e28f03a2e1494edf3

    • SHA512

      c1d51e37d111d7200a0cea96e0bae1a96c32203ce259f70dbcf18dbe4b83acc3ea8c85b90f96d7217354b6af3b279d009c8b63c5ec24ad9acc6ecd4a59add8bb

    • SSDEEP

      768:+mU3yorrjSkPKrc0VYxm/zV4XqHGU+BbgjPc/8:LUnrrjpyQQYA46HGU+BbgjW

    Score
    1/10
    behavioral13behavioral14

    • Target

      libdns.dll

    • Size

      1.9MB

    • MD5

      95ff71844d282bb801020df10602f93c

    • SHA1

      1baa0a1cfad18717b323a96f6275bc21c4b97cb3

    • SHA256

      d10c8ce9a0ee720da4d2e9d23ba14d6c517ebea0b575a400777d1cec80212901

    • SHA512

      9975d9c7d96a14b5dd7bebc83a21921d62d7e1de3187ea364a56dd86094921ac3be4e023e1ead699b700f47ba542bebef4de1da051bc92fc67819ab9fc698fb8

    • SSDEEP

      24576:TasgAoeocXdgmKndQoXgxv+yNh0zGsPWVcl7m2p+/c7:77xOgx24h0zGsP3m2pJ

    Score
    1/10
    behavioral15behavioral16

    • Target

      libeay32.dll

    • Size

      1008KB

    • MD5

      9b982710a85a826f80da7a4735d25986

    • SHA1

      10209f64fbac350613db4c22ec077fed9eb25c5c

    • SHA256

      2e653459595ca751170403d81e624a168419e41ea4dcfbc9a308ab2c7c70a437

    • SHA512

      6f53a0013a790f84f87270ef2636e152a3b277a0e2d771d076778b404fb9d57e1e1aca05ecffc29c955b2f0be5bdf28ffd7c5b6a52f1b3c12481e3be443ff27c

    • SSDEEP

      24576:HHcCWxpMeGy9XjvUCFxhk3e/p+nkmC+EbqU:HH4ezydNFIoppm1Gf

    Score
    1/10
    behavioral17behavioral18

    • Target

      libisc.dll

    • Size

      440KB

    • MD5

      dfb8852b4f9eac01d4f1ecd11cf019fc

    • SHA1

      6f2df7aa69471aa19b0d16f49c658d14365b87c4

    • SHA256

      ac3bf18fec05c6218e7e966d6ff023407f442973f44fb92620576b2de58f0024

    • SHA512

      40b27b8393f390ae7954e7c9aff8fe46be409d0e8eccccba35824e80a704243e5d22aad3c9bf84c8e6d1f2f8219682acf1f35cccdba3e8a04871a2980697dbdd

    • SSDEEP

      12288:ZXCidTjiT/YWAwUE7rTb+6W43Z7TbpC5vM8baqw:ZXCmTjirY8b85hrw

    Score
    1/10
    behavioral19behavioral20

    • Target

      libisccc.dll

    • Size

      72KB

    • MD5

      4776ab95caef84e438f1140b1f115107

    • SHA1

      2a79c9ca1f5f852ef905213d30f75a53a6861b9b

    • SHA256

      8c5ca5753de4d04bbb7e471ec75b19980d118d5eeb198dd8f20f63eda5ab88b8

    • SHA512

      945c3a6faade65d3ec06af0e1707d80994b97b27e07aab9cf8f81c97c746c8ef4248f14bc38c55671817489864cd9cb07b4bb4b27c614e199e87cf17f9de2455

    • SSDEEP

      1536:VBLEwmv/lkEsjf2TH9IDZl0Fypif1DfD4WNFnvcjUn/DUmU24HFj:c1HlJsjf2TH9CZl0Fypif1fD4oFnvcjR

    Score
    1/10
    behavioral21behavioral22

    • Target

      libisccfg.dll

    • Size

      116KB

    • MD5

      7764136dca332c87d82c50eeb1faa954

    • SHA1

      eeee82983240d7ca903aec2bc92be171518ec296

    • SHA256

      ba91789d9a2b9e10d3dffe1b300a31c1d7fc2a5643fb34d554554aba859092db

    • SHA512

      577a6c2e33581bc6a5d2ceaf6f593ff8b36530e52b9a39d011baaf5c810dd9bdfc06f83158623a4fe712f2c919c7731736399505f48272dac2eab7c93d3756b6

    • SSDEEP

      1536:P/F1w4+MAtFA6QmaUkdS3SQVsSmU71O1x89jDWG:nF1yzXRkdS3S0mU71h9z

    Score
    1/10
    behavioral23behavioral24

    • Target

      liblwres.dll

    • Size

      124KB

    • MD5

      a2a0c17e722d618755b1d71ab5b02eee

    • SHA1

      7e57b3fa31c44966acf15fe118ae100bd5553862

    • SHA256

      d97ebc6237a81733f22341feff7a03a719dfb6ba597d2d972f16970e83183279

    • SHA512

      cd5d51a69a40473ef5bc5556607b7d438bb81e97146873af47b002bf1e07ae6ac1cc9c9d8b9376bcaf1d8c27b08785c61a0e297095a377a7a780079843112fa9

    • SSDEEP

      3072:IJKCRgvvuvys8vUhRGuXhW2kk87D8XiA1GQDqZcGUJX2:Ic6gvvu6s8vibz2

    Score
    1/10
    behavioral25behavioral26

    • Target

      named-checkconf.exe

    • Size

      56KB

    • MD5

      e3279e86b33213c83ff7ce4804e59498

    • SHA1

      014ca705a470e5aab25c2d3a44fbbedbf9e6e946

    • SHA256

      a88ff25215287fa949af9129de0eda3c3af22364ac363db7b51b51d81e777b04

    • SHA512

      922cce5169aa01175a0e1684575dd236c2df8b0299ea9c8c30bd03be652fbf51c050bdecc580da316d7b02a287e569e798d20da8dcbe439de60d9d82d974bba1

    • SSDEEP

      384:15Ly9u2CYMNGYiIzqckSLGfeab+Zc66kvXPtCJrDolVzUcjLsujdh2FWPxwUb4tg:1x0Cq8vftwo7zzoj4GUA2maSzVUP

    Score
    1/10
    behavioral27behavioral28

    • Target

      named-checkzone.exe

    • Size

      56KB

    • MD5

      5cfbf1c9dd9591695e205c14d0d33c8a

    • SHA1

      730d1e4e3831fbcb6c37d99d76f3b412a4b64915

    • SHA256

      0f013b6bb9c29eaf2e7c23bdd3dda55a685f9125fd32822adebe0da985bf8c11

    • SHA512

      49e1b8e3d939af8373c3e3bc5991f51da9909e9be65327a1ba0d27bb0cb40011723ee9fefb61c6369d96535ff7b581dec57dba450970368b2b9b796658a7d122

    • SSDEEP

      384:AYvDVM6l6cTw112K+e2iZzTNTVTBdrw2JzZKCIsxkEJ6tgEcPxwUb6F7/o4g/o46:A4l6cTw11MQ7rxz4CZrGUuEUP

    Score
    1/10
    behavioral29behavioral30

    • Target

      named-compilezone.exe

    • Size

      56KB

    • MD5

      5cfbf1c9dd9591695e205c14d0d33c8a

    • SHA1

      730d1e4e3831fbcb6c37d99d76f3b412a4b64915

    • SHA256

      0f013b6bb9c29eaf2e7c23bdd3dda55a685f9125fd32822adebe0da985bf8c11

    • SHA512

      49e1b8e3d939af8373c3e3bc5991f51da9909e9be65327a1ba0d27bb0cb40011723ee9fefb61c6369d96535ff7b581dec57dba450970368b2b9b796658a7d122

    • SSDEEP

      384:AYvDVM6l6cTw112K+e2iZzTNTVTBdrw2JzZKCIsxkEJ6tgEcPxwUb6F7/o4g/o46:A4l6cTw11MQ7rxz4CZrGUuEUP

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks