Overview
overview
3Static
static
3BINDInstall.exe
windows7-x64
1BINDInstall.exe
windows10-2004-x64
1arpaname.exe
windows7-x64
arpaname.exe
windows10-2004-x64
bindevt.dll
windows7-x64
1bindevt.dll
windows10-2004-x64
1ddns-confgen.exe
windows7-x64
ddns-confgen.exe
windows10-2004-x64
delv.exe
windows7-x64
delv.exe
windows10-2004-x64
dig.exe
windows7-x64
dig.exe
windows10-2004-x64
dnssec-dsfromkey.exe
windows7-x64
dnssec-dsfromkey.exe
windows10-2004-x64
dnssec-importkey.exe
windows7-x64
dnssec-importkey.exe
windows10-2004-x64
dnssec-key...el.exe
windows7-x64
dnssec-key...el.exe
windows10-2004-x64
dnssec-keygen.exe
windows7-x64
dnssec-keygen.exe
windows10-2004-x64
dnssec-revoke.exe
windows7-x64
dnssec-revoke.exe
windows10-2004-x64
dnssec-settime.exe
windows7-x64
dnssec-settime.exe
windows10-2004-x64
dnssec-signzone.exe
windows7-x64
dnssec-signzone.exe
windows10-2004-x64
dnssec-verify.exe
windows7-x64
dnssec-verify.exe
windows10-2004-x64
genrandom.exe
windows7-x64
genrandom.exe
windows10-2004-x64
host.exe
windows7-x64
host.exe
windows10-2004-x64
General
-
Target
acc7a9a09679781673e67e0f1f976c47c0595ad721c9500f33a80b6c9771c410.zip.zip
-
Size
14.1MB
-
Sample
231107-q85f3shb99
-
MD5
fff04c4b12b8247517aeba529f76be43
-
SHA1
e75c41c3e5d1221aa6a67c775dc7deb2b827df9b
-
SHA256
0a89c56e44ed6a8af5c51b28d95bb39a10d60c954e393ad10e873310a8a3aa73
-
SHA512
f4a2edff9cddf60fa37cd594a27ec9769017149d9469882af89bb9afeb2abf7003fbafa9d439a4cfe9834a22658aa2b19c22f0ab86f1896c3876f0dc31813f31
-
SSDEEP
393216:d+HBK3ySlEuRtR7VL/1nhXskwAHmXZRr6NXCGCV+/Pzn:dUBd+xRj7ZZ5sl1X/6NSxkPzn
Static task
static1
Behavioral task
behavioral1
Sample
BINDInstall.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
BINDInstall.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
arpaname.exe
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
arpaname.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
bindevt.dll
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
bindevt.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
ddns-confgen.exe
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
ddns-confgen.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral9
Sample
delv.exe
Resource
win7-20231020-en
Behavioral task
behavioral10
Sample
delv.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral11
Sample
dig.exe
Resource
win7-20231025-en
Behavioral task
behavioral12
Sample
dig.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral13
Sample
dnssec-dsfromkey.exe
Resource
win7-20231020-en
Behavioral task
behavioral14
Sample
dnssec-dsfromkey.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
dnssec-importkey.exe
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
dnssec-importkey.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
dnssec-keyfromlabel.exe
Resource
win7-20231023-en
Behavioral task
behavioral18
Sample
dnssec-keyfromlabel.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral19
Sample
dnssec-keygen.exe
Resource
win7-20231023-en
Behavioral task
behavioral20
Sample
dnssec-keygen.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
dnssec-revoke.exe
Resource
win7-20231020-en
Behavioral task
behavioral22
Sample
dnssec-revoke.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral23
Sample
dnssec-settime.exe
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
dnssec-settime.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral25
Sample
dnssec-signzone.exe
Resource
win7-20231025-en
Behavioral task
behavioral26
Sample
dnssec-signzone.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral27
Sample
dnssec-verify.exe
Resource
win7-20231020-en
Behavioral task
behavioral28
Sample
dnssec-verify.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral29
Sample
genrandom.exe
Resource
win7-20231023-en
Behavioral task
behavioral30
Sample
genrandom.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
host.exe
Resource
win7-20231025-en
Behavioral task
behavioral32
Sample
host.exe
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
BINDInstall.exe
-
Size
2.2MB
-
MD5
f18f9885e77d9a334ea8254059db75dd
-
SHA1
26c34e00858cfc0c2a4e98c5da6f68e0e5fad3e4
-
SHA256
5c80458707a343b22562c21d38cb3e6d9cb997a896cf5f45c9dcaff5a20743c6
-
SHA512
d2fde698e30affe259a8f7d9b9c175989ef6c58f02af4d3c3635821be3a3b851182265a41313cf14bc2e9e950e1ee36daf9368999d26a58eaaf287bfe16637ac
-
SSDEEP
24576:ZYMNi4ViRoXUTKhRk740v9/6w619TZjRJsjoUb8+ztXhGM2uEP6mZ:GSRARNGs7aV7ujRnE36m
Score1/10 -
-
-
Target
arpaname.exe
-
Size
40KB
-
MD5
f92a1ce1f0c9bc32b7aab785c360cf7b
-
SHA1
3ee0771fa51f6c44dce206e21732a10e0b1f12b9
-
SHA256
04d75757e83291293d0b7853110bd43462b4f596740e9fcc99b9925d29aa06e5
-
SHA512
d560c96e1269907bf057c50b04c3106c710c955fb5ccf44e08160888e60eacd55b2125d9eb94948e70db092db9b7bd1d25c5231ed6f760ec21da4c250f619e9d
-
SSDEEP
384:DWsaAWdbuqBOziF9FmP7NVV6vxwUbMiVRFs6oP:DWsrChBOzK94hVomU/BWP
Score1/10 -
-
-
Target
bindevt.dll
-
Size
448KB
-
MD5
034e5d99111d84a39340fc8678d509ec
-
SHA1
5a7e0f26be89cd428c77207175b0f6d51b8979df
-
SHA256
0df659ef166580884edda437e3411e529985a458e5f84abad5314f3f335d7f0c
-
SHA512
358e0cf9b5b13612db636cb819751c356fe74ce81fde1cfb3a3da89dcd80608d72dbe5844ddc570d82143339f7414a1890e5d9e51c46cfaabce883be98cbaf6b
-
SSDEEP
6144:RLyto9KMLecTR/bsUpbm97VQ8873FKBkDORsnb6ZY3NedHiVXj:RLKo9PLecFTsU9m9E73FSRsnb6MIIj
Score1/10 -
-
-
Target
ddns-confgen.exe
-
Size
48KB
-
MD5
1373d930a4d28e128d7efbcb945c188f
-
SHA1
4a84e8eee774a179a30894647dc5a26f1b6eea3b
-
SHA256
0bef9d594e630588e12da124a49b8f156c8e5195a9ef593df34c278903e5070b
-
SHA512
cc94e04cfee063944088eaf6c88496340ecdfff3583e62a1e137dd439e9eb1354a01230036b4f98cbcc1e26e074c84d0a74ccc63a082af8b62517b302dda6165
-
SSDEEP
384:BixXq5jkSZMgKboGGbzdCW01IjDAd6vxwU5lp+K3SOLz5Qy6oP:AxXIDZMvbXGbz0LwDAwmUl+K3S9wP
Score1/10 -
-
-
Target
delv.exe
-
Size
80KB
-
MD5
3fcf1defb3251920293ea31514c54ad0
-
SHA1
9d3aa3afcf73e96c548bb7d7b4f910b8ef10ea37
-
SHA256
30195a5ec93064c37e0be1d6d237584f40cd4f1ea17539a6ce18d3db13128ca3
-
SHA512
cbb78cdf0279e603b9700f5e8359a76eb143e88be13f533ec40e2fd08ec79c3783ec0147498e51d5dc64d69f76f55567761b51e23b508a174230c728fd58ee36
-
SSDEEP
1536:+A+ZzZ4OiX4T9yDHiUW2Xs9mU6sUNcCD:+A+Z4OiKQDHdW2XmmU1U
Score1/10 -
-
-
Target
dig.exe
-
Size
160KB
-
MD5
bde6c89192135b0d23d3771ceb54b8ff
-
SHA1
dd4b2a8840e1583d502e1b23b4fb0b1ec2d464a9
-
SHA256
19234a9ab8572c755bae473074100b8375356fa5a3fa6d9f302d8a3efb8b64b2
-
SHA512
6e145ef7c99b0cffb58fa81e338ed82ecbcc63680e14464d2626be8640e7afdfc7919225312fa4889ea23fec9c5da2c2d34ee67c2c77b52146827be6a5bd239d
-
SSDEEP
1536:saim8ua9HblCFHlVCvy198WUnyoFbqqRZSrsMWCIThWnxtN5SmU7KMCMl5:ja97lCFFV1+yoUQSQOIlWnxtN5SmU7
Score1/10 -
-
-
Target
dnssec-dsfromkey.exe
-
Size
96KB
-
MD5
3ee31a9588fb63a47e7d98b3e91adc76
-
SHA1
7978ad6f825ffbd22415d28e43b1819ea33e572d
-
SHA256
f2fef738d1c2d3fc8b2048d4e149fc1018b07547d88ce17f90697f63abef23dd
-
SHA512
8edde468c871b45537c32b9138a30f24dc3602ab792ec6549637be529675107a7f5e850dde8c2907346db384620796d940614ca03b6510fe7ebb759babdbd77c
-
SSDEEP
1536:/NGm59cCW3aoWnZmW+5V6Eeb5xTOZ1DTUB8nP5amUl84:N5we+5VTeTTOZ1DTA8P5amUl8
Score1/10 -
-
-
Target
dnssec-importkey.exe
-
Size
92KB
-
MD5
ba33e017ab2940071eb6172f00acad19
-
SHA1
4cf68457f00deea09d39b7583ceeea71035e55dd
-
SHA256
6d6e89bb8a94bee84af9fd610357484f0026b298f428eb149466ee4d70ef0d3d
-
SHA512
8611de6ee59a13d5a78d58504d92443c753181eed842646d8230d8b8dec0cd9383634710bdf5f5e294ce886e426ead71d7e81de2a5036d5ee5eb9a144f85f3db
-
SSDEEP
1536:0ZqShOFpFl3pYjh+ul0kIEuxd+OZdPbfBIAb5qmUzoj:ythJl0kIES+OZdPzBIAb5qmUzo
Score1/10 -
-
-
Target
dnssec-keyfromlabel.exe
-
Size
96KB
-
MD5
22daced1b3994a3e53663046dfefbecd
-
SHA1
9a49f903e371dcd83998b0329cba5f0f7696c465
-
SHA256
e91a3c2bfd3540ac2db6096670bee7191fb0cffc22f6ad281ed004f33a382f50
-
SHA512
091af324db0b3b7048c137daca8d5ee8e66f89224dac25097149e228af7122ead6ad7a45575326d11596d22157e200549c5ba21b6dd27ece975c404a14719aef
-
SSDEEP
1536:pFwGKoBVVn7VBhzCKqJyo8vGn3TiYM7OZSw8HiJZ3KWgXK5dmUmMm:ogBlzbvGn3TS7OZ98HiJZ3KWgXK5dmUv
Score1/10 -
-
-
Target
dnssec-keygen.exe
-
Size
108KB
-
MD5
1f14c78cfead5955dd2d8ae704e472d9
-
SHA1
a80b08eefe88cc11dd42000ba3403909964b8f8b
-
SHA256
2c41354b091da68b741f408b1e1226e7074f8eba19f69ddca2b7c2cb1bd59cf4
-
SHA512
42437439b0404c195e63af1bd50a54d3a0323aa52473ac2c129b4e6a6c36e0c5e3c503699ae4c3bdc6f997ef8950cb6fea51827c563d5f4642190566f7928358
-
SSDEEP
3072:LyvIR8iRKf0VeCB8SOZ418RUJZ3KWgsX9A59mUt:2vQf00Vh1OZ3R
Score1/10 -
-
-
Target
dnssec-revoke.exe
-
Size
84KB
-
MD5
2bfcae08a86c4d2acb0f52e09740789b
-
SHA1
23a1052527f0a3db8d008252f24b957f37a0866e
-
SHA256
4bd930fd02fc23626852c6de575956320add9e7bbd5eecb3f992499967c97c10
-
SHA512
977f0aa318fe8028decd4467171b0ac7e80adea6a8c3a9517d302723cb5999d7dc8ad4647f17c40512e6d98be776261350a989253145631bddefa43aa1dd365c
-
SSDEEP
1536:eNMbrvYTBTVHCUip9Fkb6eIkSZDOZwxHt559mU7Ls:YMGVHX2Fkb6eI7DOZyHt559mU7
Score1/10 -
-
-
Target
dnssec-settime.exe
-
Size
96KB
-
MD5
5d0d2131b0ea2f4f2899cec66c0be272
-
SHA1
4f7c4c1a0682437f58f24f0cdcbd3468e9e32786
-
SHA256
3f57a94de33ed6f4c6b550ca9e6f811697c85cbd24bdb9becd95b616f79d509f
-
SHA512
b0994adb6b54c7651a5a7eb61a608aa315b290e578d274769001ccecffcb324e91feda765874adac09099f6f81304a66562cd4624f7d226b4d393c10878297d1
-
SSDEEP
1536:1hEVM/wGVkSztzY5Q/MevxubatUSNfOZsf9D7Kr5dmU9DW:1KnUZvxubatnfOZs1D7Kr5dmU9
Score1/10 -
-
-
Target
dnssec-signzone.exe
-
Size
160KB
-
MD5
4a2208792e6c426d352550f8b5d39321
-
SHA1
6f0d8f8156ec35e9d087f952a743eceaf532cbfd
-
SHA256
0b4c85a109a04fa0f6f5e2cb42d846d48ec9cf353561e7b09aec21341a512337
-
SHA512
fb6ffcaa554e4a3008ec1a5b2b39833197dda6800aba766312003eb6914f83857624df4f70f906317025d7c8670cf6aa7e37834c81f51681c53ba7d5102f51fb
-
SSDEEP
3072:NFppLTrO0+K+L2JAOZbpzZxkB9ha+uQa5qGUQk:jeK+iiOZVzja
Score1/10 -
-
-
Target
dnssec-verify.exe
-
Size
84KB
-
MD5
e2420b1e8aae105d0e6d45abe32cf642
-
SHA1
d5f7d611f2d90232cd4ad223845ed98ee30bef41
-
SHA256
5edd8d1f078b7841b69f838dce1030454f9b74d956cb7a1ff62616e972836019
-
SHA512
b58ee169a9876aa27feb972e43081fc9c81323ba8dbe2733d452f5907d11db17274f71d14f3d871cc7c0dcc91f7da02c79dec83ce7e7e323d040adecc37208ae
-
SSDEEP
1536:ajiXZ8D9cpSAK8w4uKpicFi+dDcyKOZ6zqdiEuV5qGU5z+:aj/AKIpicFi+dBKOZUEuV5qGU5
Score1/10 -
-
-
Target
genrandom.exe
-
Size
40KB
-
MD5
664c252527a34c6e213c22fb352f74aa
-
SHA1
5cad3e4df5f0a76984937f2391b554958c4e66eb
-
SHA256
2a4a1580b02c4253456b0b58262d704ecab4007b9b03400c3f553b982af480e7
-
SHA512
8e11557355e4c26aabdc1be1e4f9544d714f2bce8bc640918f6079c6c4b249738c026cd20b1ab5530004810f00b3343aca8ff3e57c706277ada4cb3b53c3711e
-
SSDEEP
384:I3vBCCjOU4RfHagcquzNWq4eLAW9JPxwUbIWpoeK6dP:I3vBKhrcjzzj59JGUZdNP
Score1/10 -
-
-
Target
host.exe
-
Size
136KB
-
MD5
c40ce045da999dbac4fb8367897d3a10
-
SHA1
839488c35b47b82d2f37ffb649f7730a3c901dd5
-
SHA256
7c0a2b0d08da9f385399ae5093caa378e6eaff35c8975018c3fe17dfab7ec342
-
SHA512
70e5896033996fb4f68147c13a68f7e04e9a4f74513102ff19012cb3d5490a958a19ed3ac941dfc80a73ba2e109791fb613b9c4dbf8e5b6cfa40f05a7dcc7c92
-
SSDEEP
3072:hViwl8hjFC+OEaws00vF79ncuFmxtteKGUSs:h7qjQZEawsd9nDAtt5
Score1/10 -