General

  • Target

    acc7a9a09679781673e67e0f1f976c47c0595ad721c9500f33a80b6c9771c410.zip.zip

  • Size

    14.1MB

  • Sample

    231107-q85f3shb99

  • MD5

    fff04c4b12b8247517aeba529f76be43

  • SHA1

    e75c41c3e5d1221aa6a67c775dc7deb2b827df9b

  • SHA256

    0a89c56e44ed6a8af5c51b28d95bb39a10d60c954e393ad10e873310a8a3aa73

  • SHA512

    f4a2edff9cddf60fa37cd594a27ec9769017149d9469882af89bb9afeb2abf7003fbafa9d439a4cfe9834a22658aa2b19c22f0ab86f1896c3876f0dc31813f31

  • SSDEEP

    393216:d+HBK3ySlEuRtR7VL/1nhXskwAHmXZRr6NXCGCV+/Pzn:dUBd+xRj7ZZ5sl1X/6NSxkPzn

Score
3/10

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      2.2MB

    • MD5

      f18f9885e77d9a334ea8254059db75dd

    • SHA1

      26c34e00858cfc0c2a4e98c5da6f68e0e5fad3e4

    • SHA256

      5c80458707a343b22562c21d38cb3e6d9cb997a896cf5f45c9dcaff5a20743c6

    • SHA512

      d2fde698e30affe259a8f7d9b9c175989ef6c58f02af4d3c3635821be3a3b851182265a41313cf14bc2e9e950e1ee36daf9368999d26a58eaaf287bfe16637ac

    • SSDEEP

      24576:ZYMNi4ViRoXUTKhRk740v9/6w619TZjRJsjoUb8+ztXhGM2uEP6mZ:GSRARNGs7aV7ujRnE36m

    Score
    1/10
    • Target

      arpaname.exe

    • Size

      40KB

    • MD5

      f92a1ce1f0c9bc32b7aab785c360cf7b

    • SHA1

      3ee0771fa51f6c44dce206e21732a10e0b1f12b9

    • SHA256

      04d75757e83291293d0b7853110bd43462b4f596740e9fcc99b9925d29aa06e5

    • SHA512

      d560c96e1269907bf057c50b04c3106c710c955fb5ccf44e08160888e60eacd55b2125d9eb94948e70db092db9b7bd1d25c5231ed6f760ec21da4c250f619e9d

    • SSDEEP

      384:DWsaAWdbuqBOziF9FmP7NVV6vxwUbMiVRFs6oP:DWsrChBOzK94hVomU/BWP

    Score
    1/10
    • Target

      bindevt.dll

    • Size

      448KB

    • MD5

      034e5d99111d84a39340fc8678d509ec

    • SHA1

      5a7e0f26be89cd428c77207175b0f6d51b8979df

    • SHA256

      0df659ef166580884edda437e3411e529985a458e5f84abad5314f3f335d7f0c

    • SHA512

      358e0cf9b5b13612db636cb819751c356fe74ce81fde1cfb3a3da89dcd80608d72dbe5844ddc570d82143339f7414a1890e5d9e51c46cfaabce883be98cbaf6b

    • SSDEEP

      6144:RLyto9KMLecTR/bsUpbm97VQ8873FKBkDORsnb6ZY3NedHiVXj:RLKo9PLecFTsU9m9E73FSRsnb6MIIj

    Score
    1/10
    • Target

      ddns-confgen.exe

    • Size

      48KB

    • MD5

      1373d930a4d28e128d7efbcb945c188f

    • SHA1

      4a84e8eee774a179a30894647dc5a26f1b6eea3b

    • SHA256

      0bef9d594e630588e12da124a49b8f156c8e5195a9ef593df34c278903e5070b

    • SHA512

      cc94e04cfee063944088eaf6c88496340ecdfff3583e62a1e137dd439e9eb1354a01230036b4f98cbcc1e26e074c84d0a74ccc63a082af8b62517b302dda6165

    • SSDEEP

      384:BixXq5jkSZMgKboGGbzdCW01IjDAd6vxwU5lp+K3SOLz5Qy6oP:AxXIDZMvbXGbz0LwDAwmUl+K3S9wP

    Score
    1/10
    • Target

      delv.exe

    • Size

      80KB

    • MD5

      3fcf1defb3251920293ea31514c54ad0

    • SHA1

      9d3aa3afcf73e96c548bb7d7b4f910b8ef10ea37

    • SHA256

      30195a5ec93064c37e0be1d6d237584f40cd4f1ea17539a6ce18d3db13128ca3

    • SHA512

      cbb78cdf0279e603b9700f5e8359a76eb143e88be13f533ec40e2fd08ec79c3783ec0147498e51d5dc64d69f76f55567761b51e23b508a174230c728fd58ee36

    • SSDEEP

      1536:+A+ZzZ4OiX4T9yDHiUW2Xs9mU6sUNcCD:+A+Z4OiKQDHdW2XmmU1U

    Score
    1/10
    • Target

      dig.exe

    • Size

      160KB

    • MD5

      bde6c89192135b0d23d3771ceb54b8ff

    • SHA1

      dd4b2a8840e1583d502e1b23b4fb0b1ec2d464a9

    • SHA256

      19234a9ab8572c755bae473074100b8375356fa5a3fa6d9f302d8a3efb8b64b2

    • SHA512

      6e145ef7c99b0cffb58fa81e338ed82ecbcc63680e14464d2626be8640e7afdfc7919225312fa4889ea23fec9c5da2c2d34ee67c2c77b52146827be6a5bd239d

    • SSDEEP

      1536:saim8ua9HblCFHlVCvy198WUnyoFbqqRZSrsMWCIThWnxtN5SmU7KMCMl5:ja97lCFFV1+yoUQSQOIlWnxtN5SmU7

    Score
    1/10
    • Target

      dnssec-dsfromkey.exe

    • Size

      96KB

    • MD5

      3ee31a9588fb63a47e7d98b3e91adc76

    • SHA1

      7978ad6f825ffbd22415d28e43b1819ea33e572d

    • SHA256

      f2fef738d1c2d3fc8b2048d4e149fc1018b07547d88ce17f90697f63abef23dd

    • SHA512

      8edde468c871b45537c32b9138a30f24dc3602ab792ec6549637be529675107a7f5e850dde8c2907346db384620796d940614ca03b6510fe7ebb759babdbd77c

    • SSDEEP

      1536:/NGm59cCW3aoWnZmW+5V6Eeb5xTOZ1DTUB8nP5amUl84:N5we+5VTeTTOZ1DTA8P5amUl8

    Score
    1/10
    • Target

      dnssec-importkey.exe

    • Size

      92KB

    • MD5

      ba33e017ab2940071eb6172f00acad19

    • SHA1

      4cf68457f00deea09d39b7583ceeea71035e55dd

    • SHA256

      6d6e89bb8a94bee84af9fd610357484f0026b298f428eb149466ee4d70ef0d3d

    • SHA512

      8611de6ee59a13d5a78d58504d92443c753181eed842646d8230d8b8dec0cd9383634710bdf5f5e294ce886e426ead71d7e81de2a5036d5ee5eb9a144f85f3db

    • SSDEEP

      1536:0ZqShOFpFl3pYjh+ul0kIEuxd+OZdPbfBIAb5qmUzoj:ythJl0kIES+OZdPzBIAb5qmUzo

    Score
    1/10
    • Target

      dnssec-keyfromlabel.exe

    • Size

      96KB

    • MD5

      22daced1b3994a3e53663046dfefbecd

    • SHA1

      9a49f903e371dcd83998b0329cba5f0f7696c465

    • SHA256

      e91a3c2bfd3540ac2db6096670bee7191fb0cffc22f6ad281ed004f33a382f50

    • SHA512

      091af324db0b3b7048c137daca8d5ee8e66f89224dac25097149e228af7122ead6ad7a45575326d11596d22157e200549c5ba21b6dd27ece975c404a14719aef

    • SSDEEP

      1536:pFwGKoBVVn7VBhzCKqJyo8vGn3TiYM7OZSw8HiJZ3KWgXK5dmUmMm:ogBlzbvGn3TS7OZ98HiJZ3KWgXK5dmUv

    Score
    1/10
    • Target

      dnssec-keygen.exe

    • Size

      108KB

    • MD5

      1f14c78cfead5955dd2d8ae704e472d9

    • SHA1

      a80b08eefe88cc11dd42000ba3403909964b8f8b

    • SHA256

      2c41354b091da68b741f408b1e1226e7074f8eba19f69ddca2b7c2cb1bd59cf4

    • SHA512

      42437439b0404c195e63af1bd50a54d3a0323aa52473ac2c129b4e6a6c36e0c5e3c503699ae4c3bdc6f997ef8950cb6fea51827c563d5f4642190566f7928358

    • SSDEEP

      3072:LyvIR8iRKf0VeCB8SOZ418RUJZ3KWgsX9A59mUt:2vQf00Vh1OZ3R

    Score
    1/10
    • Target

      dnssec-revoke.exe

    • Size

      84KB

    • MD5

      2bfcae08a86c4d2acb0f52e09740789b

    • SHA1

      23a1052527f0a3db8d008252f24b957f37a0866e

    • SHA256

      4bd930fd02fc23626852c6de575956320add9e7bbd5eecb3f992499967c97c10

    • SHA512

      977f0aa318fe8028decd4467171b0ac7e80adea6a8c3a9517d302723cb5999d7dc8ad4647f17c40512e6d98be776261350a989253145631bddefa43aa1dd365c

    • SSDEEP

      1536:eNMbrvYTBTVHCUip9Fkb6eIkSZDOZwxHt559mU7Ls:YMGVHX2Fkb6eI7DOZyHt559mU7

    Score
    1/10
    • Target

      dnssec-settime.exe

    • Size

      96KB

    • MD5

      5d0d2131b0ea2f4f2899cec66c0be272

    • SHA1

      4f7c4c1a0682437f58f24f0cdcbd3468e9e32786

    • SHA256

      3f57a94de33ed6f4c6b550ca9e6f811697c85cbd24bdb9becd95b616f79d509f

    • SHA512

      b0994adb6b54c7651a5a7eb61a608aa315b290e578d274769001ccecffcb324e91feda765874adac09099f6f81304a66562cd4624f7d226b4d393c10878297d1

    • SSDEEP

      1536:1hEVM/wGVkSztzY5Q/MevxubatUSNfOZsf9D7Kr5dmU9DW:1KnUZvxubatnfOZs1D7Kr5dmU9

    Score
    1/10
    • Target

      dnssec-signzone.exe

    • Size

      160KB

    • MD5

      4a2208792e6c426d352550f8b5d39321

    • SHA1

      6f0d8f8156ec35e9d087f952a743eceaf532cbfd

    • SHA256

      0b4c85a109a04fa0f6f5e2cb42d846d48ec9cf353561e7b09aec21341a512337

    • SHA512

      fb6ffcaa554e4a3008ec1a5b2b39833197dda6800aba766312003eb6914f83857624df4f70f906317025d7c8670cf6aa7e37834c81f51681c53ba7d5102f51fb

    • SSDEEP

      3072:NFppLTrO0+K+L2JAOZbpzZxkB9ha+uQa5qGUQk:jeK+iiOZVzja

    Score
    1/10
    • Target

      dnssec-verify.exe

    • Size

      84KB

    • MD5

      e2420b1e8aae105d0e6d45abe32cf642

    • SHA1

      d5f7d611f2d90232cd4ad223845ed98ee30bef41

    • SHA256

      5edd8d1f078b7841b69f838dce1030454f9b74d956cb7a1ff62616e972836019

    • SHA512

      b58ee169a9876aa27feb972e43081fc9c81323ba8dbe2733d452f5907d11db17274f71d14f3d871cc7c0dcc91f7da02c79dec83ce7e7e323d040adecc37208ae

    • SSDEEP

      1536:ajiXZ8D9cpSAK8w4uKpicFi+dDcyKOZ6zqdiEuV5qGU5z+:aj/AKIpicFi+dBKOZUEuV5qGU5

    Score
    1/10
    • Target

      genrandom.exe

    • Size

      40KB

    • MD5

      664c252527a34c6e213c22fb352f74aa

    • SHA1

      5cad3e4df5f0a76984937f2391b554958c4e66eb

    • SHA256

      2a4a1580b02c4253456b0b58262d704ecab4007b9b03400c3f553b982af480e7

    • SHA512

      8e11557355e4c26aabdc1be1e4f9544d714f2bce8bc640918f6079c6c4b249738c026cd20b1ab5530004810f00b3343aca8ff3e57c706277ada4cb3b53c3711e

    • SSDEEP

      384:I3vBCCjOU4RfHagcquzNWq4eLAW9JPxwUbIWpoeK6dP:I3vBKhrcjzzj59JGUZdNP

    Score
    1/10
    • Target

      host.exe

    • Size

      136KB

    • MD5

      c40ce045da999dbac4fb8367897d3a10

    • SHA1

      839488c35b47b82d2f37ffb649f7730a3c901dd5

    • SHA256

      7c0a2b0d08da9f385399ae5093caa378e6eaff35c8975018c3fe17dfab7ec342

    • SHA512

      70e5896033996fb4f68147c13a68f7e04e9a4f74513102ff19012cb3d5490a958a19ed3ac941dfc80a73ba2e109791fb613b9c4dbf8e5b6cfa40f05a7dcc7c92

    • SSDEEP

      3072:hViwl8hjFC+OEaws00vF79ncuFmxtteKGUSs:h7qjQZEawsd9nDAtt5

    Score
    1/10

MITRE ATT&CK Matrix

Tasks