Overview

overview

4

Static

static

4

BINDInstall.exe

windows7-x64

1

BINDInstall.exe

windows10-2004-x64

1

Bv9ARM.ch01.html

windows7-x64

1

Bv9ARM.ch01.html

windows10-2004-x64

1

Bv9ARM.ch02.html

windows7-x64

1

Bv9ARM.ch02.html

windows10-2004-x64

1

Bv9ARM.ch03.html

windows7-x64

1

Bv9ARM.ch03.html

windows10-2004-x64

1

Bv9ARM.ch04.html

windows7-x64

1

Bv9ARM.ch04.html

windows10-2004-x64

1

Bv9ARM.ch05.html

windows7-x64

1

Bv9ARM.ch05.html

windows10-2004-x64

1

Bv9ARM.ch06.html

windows7-x64

1

Bv9ARM.ch06.html

windows10-2004-x64

1

Bv9ARM.ch07.html

windows7-x64

1

Bv9ARM.ch07.html

windows10-2004-x64

1

Bv9ARM.ch08.html

windows7-x64

1

Bv9ARM.ch08.html

windows10-2004-x64

1

Bv9ARM.ch09.html

windows7-x64

1

Bv9ARM.ch09.html

windows10-2004-x64

1

Bv9ARM.ch10.html

windows7-x64

1

Bv9ARM.ch10.html

windows10-2004-x64

1

Bv9ARM.html

windows7-x64

1

Bv9ARM.html

windows10-2004-x64

1

Bv9ARM.pdf

windows7-x64

1

Bv9ARM.pdf

windows10-2004-x64

1

HISTORY.vbs

windows7-x64

1

HISTORY.vbs

windows10-2004-x64

1

arpaname.exe

windows7-x64

arpaname.exe

windows10-2004-x64

1

bindevt.dll

windows7-x64

1

bindevt.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3606500d72af1b3c9ce9e01ca349c7c09bbaf215900b434c88d3c0b37171ea29.zip.zip

  • Size

    6.3MB

  • Sample

    231107-q6wfdsfe3x

  • MD5

    9dcaf6ffcf07d0fcb697cf5d5cac3019

  • SHA1

    441d675b36daf7885e61e65f52f638c6e3b5089f

  • SHA256

    1aaa3b9ac49370a52a183cabc00f52c56df9e3dc03e3c33808e945ad0e7650eb

  • SHA512

    8cf5e20954f99040e2044823a1156ec477ce55f0df4c6a71dd32940b3aeca834fb278d790ce5ddec40637bd16b4c541002e21f0fde57927eeef66b5f0c819b86

  • SSDEEP

    98304:ZGGfqCzCTRErF1wEcbN4i9v+E41YvYzKlCFCrpHjCva1//newuZSy62gXpEs3:XfGF6FJi9WvTGUorpDOaJ/etZSAgZB3

Score
4/10
linkpdf

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      240KB

    • MD5

      4508f752a8c7dfb0f6cb27cef2ecac8d

    • SHA1

      fd4d0c31b619512739539212db01a3846d361033

    • SHA256

      298a20d1e19f95c04a9172b4d270c3c4f35b79891a39196b16fa3d7d85be7000

    • SHA512

      9b0b7e987f52f43d84e0eecf8dc82d2be76c28397d95452067520efa2756d2a4e99d1c8976c5c8b716e788872115e21dc6bb512e334aebf7db7a91436d667499

    • SSDEEP

      3072:EP7eYLoTZZLISro1XgfPcofYARuRqEjEiryJeETa+61qgNmJMtWoE/ETbG:ceD9RISro1QfUofA06EieaNrxEZ

    Score
    1/10
    behavioral1behavioral2

    • Target

      Bv9ARM.ch01.html

    • Size

      24KB

    • MD5

      9dd8912adac6508b3e21d0b0695fdd14

    • SHA1

      a1f51aa1a73540730b27797429a30da6893ba913

    • SHA256

      6051d7396c7f17e0f9a2597838c63bd201a46befcf41b1459bdb4c61198a4634

    • SHA512

      b7cf59d5df3463af78f28a5edbcb49eb647c32b97c529075195d08847277eeefac25131983b405a04401e55c58a816af5d3f3ac4c9028f025b9caf97ea7a1b21

    • SSDEEP

      384:ZyvOXFYNRhwYbTYLztAD4OOZASl+X186ggGpZ8W:Z0O8WEYdZA1X1WpLJ

    Score
    1/10
    behavioral3behavioral4

    • Target

      Bv9ARM.ch02.html

    • Size

      7KB

    • MD5

      3a9cb96f44a0b56377ada7f9e5e0b1db

    • SHA1

      70be6139b05347df6512fb0f531b62dccb3bd5c2

    • SHA256

      f88e732730e32af83f96ea16639b2c02a782c65c49caee6cab99b3da5fdfe4f8

    • SHA512

      08df5e4db743a01a6162608cc149d62444404786f91add0be4f3e63a67a4a4675defc891493e00f20b7d9b933cfdb07a8402de9a02f4ae525f6126c4e52421e7

    • SSDEEP

      192:ZyvOHJQlNSgqkDqjaBKmmGDdrvvI16lU2Url/EBzTRcnV3IuFm0:ZyvOpAYjALj+Wy5J

    Score
    1/10
    behavioral5behavioral6

    • Target

      Bv9ARM.ch03.html

    • Size

      52KB

    • MD5

      b206bb0876cacbdb4d0d447236ec03df

    • SHA1

      1be5953d49f2f9ea250a2167aaf4de3866f7a087

    • SHA256

      d6dea2814f1dcad9261d6d63a8cdd7864797a03b26c75a8bd17a042de4bfdf55

    • SHA512

      21f82a65d61d2b4c3e34a7380b01f3d312e837875cc1ab133746b542579104cc303b8432cefeedfce475b61459831860a5c3179598284f3580a1e8b610cf00ad

    • SSDEEP

      768:Z0O+3tOxtbdjxvijhf8Ge0ENAaK/gZu3WDRCw:Z0O+9Oxtbdjxqjhf8Ge0EI/gMM

    Score
    1/10
    behavioral7behavioral8

    • Target

      Bv9ARM.ch04.html

    • Size

      94KB

    • MD5

      5d48202e3c739f2f1e1141adceac2fb9

    • SHA1

      268e59eb46163de0ea0e23803c4df327bf212be6

    • SHA256

      85dc290707eb468eb43fc02e202865e9e719cddc45a92313c30939dddd0294e7

    • SHA512

      43ef94e59ad3b330c0283d08abf1137a6b100af55d8b9774ce110917245ee3608ffa4e3ddda59d89ee004b0ae1c9cc3aa5c93b11dbce6a7b089a041b9946b9b9

    • SSDEEP

      1536:Z0OGXnAmC6w4TqoLJCx8UVWBUW3mW5YWgp1zf:Z0bAmC6rbX3H5VgPf

    Score
    1/10
    behavioral10behavioral9

    • Target

      Bv9ARM.ch05.html

    • Size

      6KB

    • MD5

      b9e052e266d8df39f0779309b61bf6b9

    • SHA1

      fc9102b1cefd8523ce8bea62816be1a1a2e6f016

    • SHA256

      8980eacba1059a74219f03e1ca9ed1ef8f7ee9f12d01205c16a49598ef5b174a

    • SHA512

      d4ec404184647ca28c520189a198f7d395ce524eb50e4ea9c3c5c38b473a6b95793b6775808c6ac9252a98c8128828f75b4ea05b23a3dfcdadd266d6cd8b0086

    • SSDEEP

      192:ZyvOHU4cNSpnfiAXSkKZHlyK6Qar08+jg4gY0:ZyvO0vYkk4H8Qi4C

    Score
    1/10
    behavioral11behavioral12

    • Target

      Bv9ARM.ch06.html

    • Size

      535KB

    • MD5

      a0ac26c69c42357cebeca366322a7c6d

    • SHA1

      cb5e4935127871216b0817eccd5e816fda52fd5e

    • SHA256

      83b96f50189057f3fe195d435d675c8296a4986dc7c719574009d99b6a5d4b6b

    • SHA512

      4a84b0fbba6ac3bab859dae8a418f0250a2a598e834b7e3b1e3dedeae7d6b20fafb1675b7ba595dde1ee2ce23327c377f842d30e4552861afbe0c9dd7fff216f

    • SSDEEP

      3072:Z0mz9I3iaHEEvAkHh/K9MAfN9q+Sb1emg/5SWo7VJJVp4SVGCMt5RPL65o:Z0w+HElkHRoJ5S3VGj5RPao

    Score
    1/10
    behavioral13behavioral14

    • Target

      Bv9ARM.ch07.html

    • Size

      11KB

    • MD5

      41ebc600640d18f96be944f11a7060ae

    • SHA1

      bc75bba227333307074b538c810cffba2dd61729

    • SHA256

      1ab5702dd2774fd970c3dc1343a33985c3cf355e661b09093c7265cf48091a51

    • SHA512

      176ad6c9170d77bd6a80999763f052df24b9b24ea54e1f9f4536364e8c69156c4fc710522146dd19db21420f03eae89c0f08b35b95354a88887da9fd357a9fce

    • SSDEEP

      192:ZyvOHk1FNSMuoTzMbOTtsorF4k9h6B3orK9hP0PkmP+YCBF0:ZyvOErYOhtsoBUlOPqm

    Score
    1/10
    behavioral15behavioral16

    • Target

      Bv9ARM.ch08.html

    • Size

      6KB

    • MD5

      255d59d149fb815e947b630647729242

    • SHA1

      d44c5452012c75b35aa49afa1fb116347a23bb00

    • SHA256

      79522adce5c93204792a8966c8ae94b4011c716c82622760c2a259eba52d3e45

    • SHA512

      65e600e5c72a4cf4dc3c7f2410352a96c45bd88bf0f26b3d01dc4e48b7ca7cdb93b661ce345fd5ec61bdbb07d19b623d5e5c83c2c51a12d7daca65209d2e97c5

    • SSDEEP

      96:ZBAvOHe5T4P0VVoIJNaLga+AK3fmeeXQKDT6e8eN4teh3NedL3n2AeMgonFPmnFG:ZyvOHmDJNSig94WN2XFmyGivN80

    Score
    1/10
    behavioral17behavioral18

    • Target

      Bv9ARM.ch09.html

    • Size

      67KB

    • MD5

      b0b0f2df633d62bc09907e9f6607c2b7

    • SHA1

      395fcf1207d59cc8a9674ff16f8ba810352ab9ac

    • SHA256

      c1c603876500628477b142b1ec4ec95816bef44349dd2ceceac4a5465d3e981f

    • SHA512

      3bdc18f4277d58d66ccfce885854bb62d277f7f15d20a5344b1ba21b22d6c5fdb2db5b8c059e961fccfa39043842de9158603e2d62398114d5882c986ebd6613

    • SSDEEP

      1536:Z0OBUSJLq0gP1W+W2cq2DMrbSxMg3XkuZ:Z0lSSY/2cq2DMrbSxMgHPZ

    Score
    1/10
    behavioral19behavioral20

    • Target

      Bv9ARM.ch10.html

    • Size

      7KB

    • MD5

      66ec2978e79493da30461aff57030ba6

    • SHA1

      af7520c31d40580d5a56c0c0b59cf40ba1b41f1f

    • SHA256

      c270af1bf807c5db93f6ed12181f6683fd92ce1420db95e0edf727f2ddbf176e

    • SHA512

      c53447b4be024cb9db412a318347a617de2dbd5f766f79d8b7fc8faa94b5a3ebf3527264f248652eb7273f4abe27f6a1cc0dafd9bad1236c721eb915719e80ec

    • SSDEEP

      96:ZBAvOHe5T50VV2yNaLgAAKyfdytiIxN4gYI7XJ4zJa1JUC/byKD+qmWzrzbKpmAF:ZyvOH5OyNS28tJma1tDHaHPTy0

    Score
    1/10
    behavioral21behavioral22

    • Target

      Bv9ARM.html

    • Size

      24KB

    • MD5

      092838df80020bcda038eef223ad9185

    • SHA1

      857cb7fa3c5bb7888a3eaf50ce4fc931803b45c7

    • SHA256

      710b91bea8c281b8d824d29265af3a77a042cf873594dd12d1c657b2e559041b

    • SHA512

      50fe74dbd94a9d88889e1f166efd21559ab70e88c2532a20476c8a535e610fa8f48891f397fc652339e4a63c8387d94ff5dce4759888a91c8eca5d295c91a7fb

    • SSDEEP

      192:ZyvOHNepNSpKeT4Ip3hkjUBrAoNLc9hMZkeArnb3dM/MSBZdv6Jma1tDHaHzz0:ZyvOt0Yw24IRhwoNk1eQsKDHa0

    Score
    1/10
    behavioral23behavioral24

    • Target

      Bv9ARM.pdf

    • Size

      1.2MB

    • MD5

      254543f09343256cea05bb9effa421eb

    • SHA1

      3e65e85744aaa08970f3344a6e021e8098d2910f

    • SHA256

      76a19ad02d0102993cf91739a13c5d7ea5f9adba40960760c5d41d7c840392da

    • SHA512

      b3268b9ac72c9b6be0eb3ff2367bae307be12eeb2dc13a4e65abc18e59b7a10fc8500a850f6d8a1a72c15e5c0396395146279c5aafafa368f6165efb353330dc

    • SSDEEP

      24576:NBiiDOMJI1PMxoJrSOQnOOKTkucb5SyInSM+r/n4pAvt3nA:rhpJI1PiOitbAol3A

    Score
    1/10
    behavioral25behavioral26

    • Target

      HISTORY

    • Size

      12KB

    • MD5

      2feeb17a6a7482bc921b5237bee501f8

    • SHA1

      e8443f27d1f4b20d4078cfabe7b06f39e368e9de

    • SHA256

      9e94b8d31a98b209ae40f7ced094656455d1b3d1997b46e7f2d55173190396b2

    • SHA512

      ab26e3daae2aa0767919d8a3bdd77d566ca27bcfce844e2cf95083048ea621cbd57cfc66f91036116349e6d7c44361c301e23351634db335be7e29a8b50dc2f7

    • SSDEEP

      384:JUdIFHwblfSldLjb/OXX6S4vc4MSWA0Njw:JItbZSlBjb/sXH2WbG

    Score
    1/10
    behavioral27behavioral28

    • Target

      arpaname.exe

    • Size

      6KB

    • MD5

      3288dc82c302a35fbbb18c23f4eab607

    • SHA1

      7c3631ed99cdd675043c8bec83788452b774aace

    • SHA256

      e26e1e9c062cb07aaf509f11952a53dee0edfd9b4e45303788c0673f33b6f992

    • SHA512

      8fedcc237ed84d80f56738874ded480a95f44f94bdd834c3442b6735fd8b7afb5abd0a92742553dfc512c5bcee0f872ed577d8d7e5386ef3a7f03ebafac0fab9

    • SSDEEP

      96:MI64kOrFRlKzmdTkDDMZ71+Tj+ZPMTcWdi6cZkqAoMVthBi:MINkmvZ71+v+NMTcWdi6CkqVGk

    Score
    1/10
    behavioral29behavioral30

    • Target

      bindevt.dll

    • Size

      52KB

    • MD5

      96666a23da9d03cd58685e84a1603ba8

    • SHA1

      89f2d8ac4f2fcf3579883d286dfa3ddf11518a14

    • SHA256

      848c81ee9c78c4f1f394063bf27df308770b7beed1375eab804a252529529c1e

    • SHA512

      0f96b88bdf9f75046ab9acdbd1a23b23f61288ffb37183748024cd8757953ffa0da962d80fb39ceb6075503c169d8bfe5db349dcff27d3a0ded9e4c88bf4f74d

    • SSDEEP

      768:9XTQ3dz80P3mkj0wWyRepPVJuiNdVtPw:9X4HVj0wWyEB5tP

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks