Overview

overview

3

Static

static

3

BINDInstall.exe

windows7-x64

1

BINDInstall.exe

windows10-2004-x64

1

bindevt.dll

windows7-x64

1

bindevt.dll

windows10-2004-x64

1

dig.exe

windows7-x64

dig.exe

windows10-2004-x64

dnssec-keygen.exe

windows7-x64

dnssec-keygen.exe

windows10-2004-x64

dnssec-makekeyset.exe

windows7-x64

dnssec-makekeyset.exe

windows10-2004-x64

dnssec-signkey.exe

windows7-x64

dnssec-signkey.exe

windows10-2004-x64

dnssec-signzone.exe

windows7-x64

dnssec-signzone.exe

windows10-2004-x64

host.exe

windows7-x64

host.exe

windows10-2004-x64

libdns.dll

windows7-x64

1

libdns.dll

windows10-2004-x64

1

libeay32.dll

windows7-x64

1

libeay32.dll

windows10-2004-x64

1

libisc.dll

windows7-x64

1

libisc.dll

windows10-2004-x64

1

libisccc.dll

windows7-x64

1

libisccc.dll

windows10-2004-x64

1

libisccfg.dll

windows7-x64

1

libisccfg.dll

windows10-2004-x64

1

liblwres.dll

windows7-x64

1

liblwres.dll

windows10-2004-x64

1

named-checkconf.exe

windows7-x64

named-checkconf.exe

windows10-2004-x64

named-checkzone.exe

windows7-x64

named-checkzone.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    182df72f4e336a793f969a162592ab966d1c270ef5e5eb332ac796fbb260bdae.zip.zip

  • Size

    10.3MB

  • Sample

    231107-q6kc5agh89

  • MD5

    910a9ac718512c99bbe924061efbd692

  • SHA1

    221983b5568855986834befe2c2c3716fdb34898

  • SHA256

    9abc5df0d92751d103ebde78da3fd31630878b987cebd730d655fce5507d129d

  • SHA512

    5628a8df16b5d3656b28284c3cf682640de893ffa202a8fc39f13f942972822e93b4a8b525794b6df4d058c9b2fc980275e9078389bdd4a416a07634b334edf4

  • SSDEEP

    196608:AyM7PgsCKiXBQFMaCYLjLqqilwxiMl3zR+atcROh498e+4QgplT:AyM7o6KKFEY3LqqiWx1ll+CcQO9834rz

Score
3/10

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      2.1MB

    • MD5

      d6e86b0420cb058b9ee24647e4b70d1d

    • SHA1

      de573de9d35401aa7c252af50feef6be506c82b6

    • SHA256

      d0b96904be896732d23b4c46d81da01554915dc14afba30b8df0e10bb5a54172

    • SHA512

      89a491ca9e8919fff0fdac49a6ca3a10836ba59a882d447de4701e92e5c61be2dd0bff8012dbab050ebbaacedf8fbfb6076c5a27cf54b0362899506378b1a17e

    • SSDEEP

      24576:Sop+5OpBtk6FaV4Z5v6zu5G0rYR+v8aOHdlA7WX:JLkNVoGHwOA

    Score
    1/10
    behavioral1behavioral2

    • Target

      bindevt.dll

    • Size

      444KB

    • MD5

      40606dbcd0f960409603cfe409cd12fb

    • SHA1

      5fcce8c600e845c66f47b19d9b2dc41cd2ebaf69

    • SHA256

      641532b1d340d5e7504c36b5956d6787e4e291f8f0d92f196af11681dce5f29e

    • SHA512

      490b819de511aaa18b232225b65a58bdc1343d4f4f1b04371e83e91d6d100a2c9c7b3c18db0b737f6cd4e728964894759aab7f0752aa3f2b89d8511820a9a62b

    • SSDEEP

      6144:t7cfZ23n+eb6n/ylxK4ANV0ulNnWz5fx+mDiM9KtEbOBaF6:t7OZ23+eW/ylxKyulNMx+mDinmbqH

    Score
    1/10
    behavioral3behavioral4

    • Target

      dig.exe

    • Size

      124KB

    • MD5

      35266401fe35690cfb46bd182bf5ed87

    • SHA1

      e220b6b7ffcb6351ab7ca9939c96ebc30323437e

    • SHA256

      2469234d13de3104063770642c05da4af539716cfc781cabbbd9fe1f37dc3858

    • SHA512

      9196e7a092706e33c396720f8f41619e4d7d3c297eb5a3a98e98acdddac33593a1c2c00bf6762b68107dc509f23f4a6db571a4c58b226acdc6cd43e08316682e

    • SSDEEP

      1536:Gs6w+98wenwasyprVEiUFv4JaxQ3UmU008:r6w+9tcprVOl4JaxQ3UmU0

    Score
    1/10
    behavioral5behavioral6

    • Target

      dnssec-keygen.exe

    • Size

      60KB

    • MD5

      236f2a362e0407bf5ed52891d75f8cd0

    • SHA1

      27f13832b37ca701f86c54ca1a88aa0e93235361

    • SHA256

      e986321d4662bb451c022ce6eb8c2e22f350031a233d894854a64eaf13c39790

    • SHA512

      e8652d7e8b249497ebd7da10ca114d8d26d7129ccaf48a51a096ebaad8d7dc8da5a10b614ca452d8fe5512f6fb13ed23a669d2a53f2c6d67f8f733a550755aa9

    • SSDEEP

      768:LrHzEnttc8QR6Rah/T/qhFzCrcmUUyHwP:XzrBhb/qmrcmUUyQ

    Score
    1/10
    behavioral7behavioral8

    • Target

      dnssec-makekeyset.exe

    • Size

      60KB

    • MD5

      857314777424e06b014688e4b12dc4df

    • SHA1

      ac803382c60e19c5ec6f31c57ecf4b43c2720847

    • SHA256

      a3d6d70db1c7f677d6d19a835ccd576dccb249f6056ae84e90e50582ef6ad527

    • SHA512

      144e8ed12763a2f3d9c99f75ec2757c9bf779e2ed55428da0428a2c20382b2bf7f42d50dab5ea91202da166efa2b03ddb914b1a4f7481fe57bc03811ea1128ce

    • SSDEEP

      768:2NuHSRqVd/a5Y9xroz8zacP19RmUsXiwP:91VdJzaWZmUsD

    Score
    1/10
    behavioral10behavioral9

    • Target

      dnssec-signkey.exe

    • Size

      60KB

    • MD5

      16407c7f4136153d802ceae0453efc98

    • SHA1

      3db3c04dfca2817a0dec975953f613e5463b2390

    • SHA256

      257e13fac43b0f2a7938ad12c2dcd1eeba3da44a5afb131b7476a560f9f19301

    • SHA512

      c6a548780d79c55246aa2fcc6633c08e61047c294bb00d6955f746e34b70cda284c5e39ddc7c7efee4e79c7c174529bd4eb2dcca2e6e75b8e2fae7259fdbe52f

    • SSDEEP

      768:urX6jFYGEimBPMUGnzqgXpVEDMYnmUaGGsGc1grwP:NYGEiUPMugXpCjmUaGNL

    Score
    1/10
    behavioral11behavioral12

    • Target

      dnssec-signzone.exe

    • Size

      88KB

    • MD5

      6dbe717f31664b8975ed437c769bd23f

    • SHA1

      0efd75d58aa0265d078ee3d463d9406b66ed6e3c

    • SHA256

      b8fb215c574a0d301b16ede0bd5727e5612a7b2b49d00ce1d775b3ff426843c1

    • SHA512

      9846e7671cbd0a53edd3a4ccbc2ad8dcb2e57dd7f552d08e0a66e062e9a7f9d4d3d2744ea641e017cbac89bebdcc52f6a05c8f276ce64a469d6c56dfbcd4cea2

    • SSDEEP

      768:wQuFknAKJVlOqDQCI6pMC5waMwQ+rYkfG2JzMfV3iyopRrGUHefxOoP:+FkhVQSQCq7aMwQ+rNuRV3iDBGUHeZ

    Score
    1/10
    behavioral13behavioral14

    • Target

      host.exe

    • Size

      108KB

    • MD5

      3ec05bb4a9dba6d4b72fa30b3305198e

    • SHA1

      7479c5c7b886b5bb15e1e570d34d54fb127b04de

    • SHA256

      8cf9f438ecad5710126cf19c21748b20ba25cd6f37c43facbb6d75264a2247e8

    • SHA512

      71ec273b66504406d71801c2e9d6fe5ad295dc48acbc462b83d05b5cbb2f4a979b131b10faa1cf04d90d2f4f75a8eb7ff2d7ed0d4ade059d511fb6c4000d3a0c

    • SSDEEP

      1536:fNuZapFlpvlo8isOz1R3gLu2axQ3UGUdpKnXf:Ua3l0/sOhRQLu2axQ3UGUd4n

    Score
    1/10
    behavioral15behavioral16

    • Target

      libdns.dll

    • Size

      1.5MB

    • MD5

      2e9ed049d9ba879ba48c1d080d93d69a

    • SHA1

      704044c36dc61eb8f8fc7a4f70e0279845d35a19

    • SHA256

      a800c4fdc66c6ca146a34339b389546060221c9951354469e6fc2d245c6c9df5

    • SHA512

      652be0725d53813691f573875e4688f29765f266ac9a0a390a537b899d6a4b620a5a0a9d77ec34ebdd1c8c437d66dd168f7abf2f98a126285cc80bf6384e46e0

    • SSDEEP

      24576:appUuOPuKz+UbPLyWRFnXMBzScPev2Ep9KAB:ap6uOPuKgWRJXMBzScPev2EpUQ

    Score
    1/10
    behavioral17behavioral18

    • Target

      libeay32.dll

    • Size

      1004KB

    • MD5

      1c4255140453c2e50fa829d710945fe1

    • SHA1

      dd85b34debceb2b22550084f69e8e788476d6827

    • SHA256

      912a9e212f21154482dc80961344295f458cc01625897e394a90d92b649f3ff0

    • SHA512

      89bb9ba8ca70f9a026a6df3185b9072555be841378dce60b6950a4f327069101d01230d283f025baab1c327628301c3198f5752bf9a98c0094d809ebb2587212

    • SSDEEP

      24576:h97XP2KZAisS7GbUpfn5JOipO6ObMarb:hRCSvpfnL5p/ObMarb

    Score
    1/10
    behavioral19behavioral20

    • Target

      libisc.dll

    • Size

      376KB

    • MD5

      0f9d23749f56e208dd454eeb45a81aea

    • SHA1

      dd58baa55a700757610748dc06e5b65fc20dee4e

    • SHA256

      e22ecd0751dded5935849008b782c3116cbd174243808687932b3588e7151d15

    • SHA512

      2d2f2bc03553cb9e248cefd4fb88aa293104c99521bc727ad435d78af66e304ca62e85fefded3795d68b1e48b8c8724d98e0cb52c08d8fb705e04ccb6f39ee16

    • SSDEEP

      6144:mZAWKzfeLIwnR4RUFFlUktAwUE7rTb+6W43Z74T/VW9lsviaxV6Fq:m+WKELR4RU9AwUE7rTb+6W43Z7uW/sqK

    Score
    1/10
    behavioral21behavioral22

    • Target

      libisccc.dll

    • Size

      72KB

    • MD5

      053929fcaf36cb1d60ddd05012987d2e

    • SHA1

      a8185790b385f1426bc47202fb616fa84b12fa48

    • SHA256

      27e47e67b0da97dae6e511f2e40f2fb35963b9c0d2d6b42aa01764bbd4890c74

    • SHA512

      6208aefca647034d2085cfb3df1223a9bc86171166a55b85cedd2f15a409a37dfca05a251f1d05c22c8310e9afd76a4a641d96cb6bbd979872cc515c3fe524d0

    • SSDEEP

      1536:LxRlWNssi0t2neLc3mDfE6enSEzhUb3bEQhA2gGD3UGUi/0Fj:1W+si0t2neLc3gfE6enSEzyb3bThA2g9

    Score
    1/10
    behavioral23behavioral24

    • Target

      libisccfg.dll

    • Size

      104KB

    • MD5

      570096497cc3f721d18b9f0c60100f08

    • SHA1

      066159ddae9882f55527cfb15f5081e33b487eb0

    • SHA256

      c2783dda745080262aa4406c077e98a8043835187a746002502816de29d8d4eb

    • SHA512

      bf58aa81216c92d66221aebd5ebde79c78f5654124bdeed079f3c4262f2bd45d07e7d7822af6ebcb040aa820d3a2cefc16151bf2632e9063833213267ab469c9

    • SSDEEP

      1536:nL4q70tLdNqEiZzGohBH+GPknYP2GuDGUes6FOKbj:nL480e1Gojd9uG6GUePFOs

    Score
    1/10
    behavioral25behavioral26

    • Target

      liblwres.dll

    • Size

      120KB

    • MD5

      d01a96989cf25415b2176156ad924261

    • SHA1

      72d2130eaa0010795cec3ea9dd94338c7bbf8961

    • SHA256

      2e2579810d27d68f75e6cd40d42340896102f1fd2bd3a76725acd309eba19c13

    • SHA512

      3cc9d4c8487f8f3f23b41530db46c686a586ebce6dfb9b6f276a7ccb24e0e12e54b90d62a1fe2a6ed7fc5fc75e72235ec5000b9d222a9fc6322195aa292d15d0

    • SSDEEP

      3072:rXn6GjuOOddkFmdWxPESXunnZ2kk87D6XiAW2QwmJNmUktGhOM:rXn1LOddkFmdWJZK4qOM

    Score
    1/10
    behavioral27behavioral28

    • Target

      named-checkconf.exe

    • Size

      40KB

    • MD5

      09fb1dfe80269630528c9397bd1bcffa

    • SHA1

      2291bddb5909e57def8efb7fc2c82677f27f64c5

    • SHA256

      786c5460c8790f175a0c97dfc27135e0b8fb44f806697ac8c6ab6d8016ba9f08

    • SHA512

      91fee958573eb68e5c90f6ce54a205de06edd9ed20014b45e6dd2abc5e4f361182423ef7bc03021efd845fa0238d90912b7de436ff3e333f0b64ca6fe48ff7f7

    • SSDEEP

      384:gdb2O9zxDuzRrzLJBCO2bx3bXPxwUbCP6Z2Z/yK6dP:gh9gzRrztBCNtrGUqi2KNP

    Score
    1/10
    behavioral29behavioral30

    • Target

      named-checkzone.exe

    • Size

      44KB

    • MD5

      034bde7d277c1e5c0cd88e126dba52b2

    • SHA1

      7cd5367025701eb9e28930d620bc10efdb2e9aeb

    • SHA256

      8078da2a468a8636b5dbf21653d3d5a3e4074af2a488d588e0601c5156069d92

    • SHA512

      dacab88c382f3d6f52adcfe146b054ad25853828b8e21e0256a038e97dc75c15b46c3d394cea9cc148256c4b535a9a1f20af43da92d1082c2eac8c1c81691c66

    • SSDEEP

      384:8/3TTimoq1vq2czPTap0FPPmOhX8PxwUbZSFQry6AP:8/viVpTzPBF2i8GU8FkoP

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks