General

  • Target

    40857033ca928a1f02edf6f1bde178034139f2f419cba7bc022b6cf8bad1c7e7.zip.zip

  • Size

    13.6MB

  • Sample

    231107-r6559saf8z

  • MD5

    7280594bec35187f2112b49198b6e16a

  • SHA1

    651e3729ece1ae84fc1b8190b1cb2381ee109070

  • SHA256

    77414893827a2701c60c3afcc0460284e5c843b38565186c9acf066ef5d6ee12

  • SHA512

    69ae19449a7adf7c0958cbc9a184691d8afc9a9d64a851a1ac9d470b4a92ddf2878d9661cde05600dd40d3a990637b9b64e0fee3580824489ed2019f9a2e7475

  • SSDEEP

    393216:rpcOvnLlVFltpkd7IKiJu0VKi1TKiYz/o9YK7:dc+nZVFlPbP1TKNNa

Score
3/10

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      2.2MB

    • MD5

      0f9ad438d8efd8ac4b11538f0975e981

    • SHA1

      cc4c75a386703543fc084805c9f0cf8dbecb52cb

    • SHA256

      bf2177dece58fb5f3dd0bfe7735c9544c99da60038a53ab3c01340e3531ffa25

    • SHA512

      e3d64a34d535633104f25b2316ff645d0f5db587f1d72c3fe58fe454f84c58bf496f17d2825a6e06dbc9e1bdd085ff7aafc7780b04f2cc69ca7289b966d16c67

    • SSDEEP

      24576:dc7K1WKCtfNZGOUk1Z9OLlZqvka6b67AXp/wuI9PUVKiQUlrwob61Ow8:RcKMVZKQElQQtXICQmO1B

    Score
    1/10
    • Target

      arpaname.exe

    • Size

      40KB

    • MD5

      b62616ff0e0cd3410e81d2efd2584801

    • SHA1

      5890624057b838fd69db4a49703d581aa17d53b8

    • SHA256

      73b611dfa60d65ba63f131d9ab7cd4d01df7898933787e00a8ec539bf2fc907b

    • SHA512

      95860e0ac2cc84bee92a3488ac96a2aaba23531b68b0620d7f5e3d1abd397ec54f519665e3ebb5976e9a0b5f718a35e397c8fe99e8748a3b432b01a82f36a6c2

    • SSDEEP

      384:5WsaAWFbuTZOzixPFFmP7NVo6vxwUbMEVRfs6oP:5WsrakZOz8PF4hV7mUL7WP

    Score
    1/10
    • Target

      bindevt.dll

    • Size

      448KB

    • MD5

      8412441f1a4050ebd2da65b3d2c92cd9

    • SHA1

      e70c320a12b5136e740c89e343409a379838a9de

    • SHA256

      bd8f1be308f8b21405d5eb4eb859e0c8e566c93ddfbf5e06dc32b38af5e27981

    • SHA512

      a4c2576cd09764acbf168933122bd7ef103f782316563c8e740cea295ed5d0a52efa1b394e3bfaf33bea29fd0f803e4b15b3c1db5a8879081a9044ccddc2120c

    • SSDEEP

      6144:CLyto9KMLecTR/bsUpbm97VQ8873FKBkDORsnb6ZYrZadHiVXj:CLKo9PLecFTsU9m9E73FSRsnb6Q0Ij

    Score
    1/10
    • Target

      ddns-confgen.exe

    • Size

      48KB

    • MD5

      3715c34d1b4542f61d705de1ace9a028

    • SHA1

      c0836e3cfbcc2b1b10ff47169bc33a449a868e52

    • SHA256

      578e5544a5802838aabb4658147cd869f40b32f713b38f6ef28ed8caf6d8e317

    • SHA512

      4db3d8dfd058acd8e22cb5938cd1e17dcb3d005ca6ee77a13ac4b247e4022d443a25ab10c70205d6a3a12641c607aeb7200dadf617969c5ba7d496be370fc174

    • SSDEEP

      384:kRa5PweK8ZEhXl8AuIULuGHvZzsORZxn0tKlAy6vxwU5TJA32+5Qy6oP:Ya5PwCCl45PZznZx0sAVmUrAwwP

    Score
    1/10
    • Target

      dig.exe

    • Size

      152KB

    • MD5

      79a9ef01dd164018c13563420c781ac6

    • SHA1

      7b7046c6ae796f9897faed0a4abc8fd5f3b11e86

    • SHA256

      15f17db805972bdcbf2927158da11fbd74cfea4d3291339e0f9e42dd17b21282

    • SHA512

      e5dec484437f79f0bf414fd2ea6ba0660c7636b8ebe8b80bf1a142a1359972805a49f457ca2621fee2b6a0e3f6a489cef2bb98d83243638ad0f554a80ed2dad5

    • SSDEEP

      3072:lrdvB3DJqfQJz6n22qk4HVqxfBjamUzLbbb:dlx623H4fBO

    Score
    1/10
    • Target

      dnssec-dsfromkey.exe

    • Size

      96KB

    • MD5

      bd27341791b1761657c3f642783543cf

    • SHA1

      30c2a0fe29f43e94b64c44452137fbf27bcb42c0

    • SHA256

      a0d14eab3781d0a0c684c088b758861328a55b23d2e246545a6c3a173c495329

    • SHA512

      aa218d04d9531567ca7dfc66da46ed4dbe8a5e584ac110841d8fbecc020e0cc617d7766beef8cbb43c932e0ef9c466311b54700d12e343468f952bd2f9a9ca7f

    • SSDEEP

      1536:uLQD3MC9cEs4ItMmbOVXsrcjXrzOZ3NWFkmZ8nv5lmUtelwIi:uPimbOJsrU3OZ3NWFj8v5lmUtS

    Score
    1/10
    • Target

      dnssec-importkey.exe

    • Size

      92KB

    • MD5

      40e1d970bafa07a12da0fbd457b2b629

    • SHA1

      e8504c125fb0ef8c9e5a270706738ac15c4f9742

    • SHA256

      0f6838f9fef1f4c4ede4d07bcd026fcc9a6616aa011bcc7316cb4227eea66812

    • SHA512

      8b43cbe15623b04b3c323784087e28f4887ac5405edefc21d33283a14928013ff4dce240147c0157a0342ffb976daf53b39619db2c8d7814cbf65843b4a8ec82

    • SSDEEP

      1536:a19jJ+HObWbMsXf9bx8LS3BKOZYtUpEVb5FmUB6X:UfsXf9bx8LQKOZXpEVb5FmUB6

    Score
    1/10
    • Target

      dnssec-keyfromlabel.exe

    • Size

      96KB

    • MD5

      b7b268f190bb5d302afadaf10a9a9ce4

    • SHA1

      d2cc1dd568e1b33d0272b4ad05c3ae3db4ccb43d

    • SHA256

      29d7afae735f9dabb9d23d23ad73c9e911471964571aede76a788ff741f53f62

    • SHA512

      80120300c4b66c8ee2116a3940604ca664056de714249d9a2d3fc085a840face1aa5e0ac5b2d2931476673e7c0728ab4522e15692d806391c7c8f9195dd5d944

    • SSDEEP

      1536:wGeDz76izTlDyIf6rtCEyUBzD3IOZO9mnlTJZ3KWgX55imUTq:z0y5DyUBnIOZO9mnlTJZ3KWgX55imUT

    Score
    1/10
    • Target

      dnssec-keygen.exe

    • Size

      104KB

    • MD5

      2c4c204e40bda0d29b208adcb514ac22

    • SHA1

      6bc9fd58d5fece3972285728102ca410256be7fa

    • SHA256

      af21ac855324266b3dbb73bc08e8c33501dea609ee58126e0736907b82335c98

    • SHA512

      f33b614d62fe2c1a713d4a0ffa27a28d3ca15c8bebbbb3c00146a1dbf46d127e2f92c4c2dc916550351e6be2d8cb73a08d080aa44854350879625553444c303a

    • SSDEEP

      3072:Q2jV9mm+ddtl1aOZaArJZ3KWgsX9J5imUP:Q2jVp+drKOZXY

    Score
    1/10
    • Target

      dnssec-revoke.exe

    • Size

      84KB

    • MD5

      2279645fd8d9abbc27da5270ae41e235

    • SHA1

      98de620dc19a46cc96459247df26540cc2bd7766

    • SHA256

      c6ddd9330038e133ab8c7594ea940c515f0917d1456d545e3dd35eed8462492a

    • SHA512

      17041580e1227c8e33bf6a239e88b662ee1a0951a96afaf133dc90f7d254c634361b5184e80c4c7a9ed47f5efc0390080a5fbd22fd91fc6d18f1e8fd34893106

    • SSDEEP

      1536:Uja1AQjxHTU/2J/UZHzEdNvrZ1Aaf/XOZioStr8N5CmUyO6:82u2Jyz4NvrZGKXOZioStrm5CmUy

    Score
    1/10
    • Target

      dnssec-settime.exe

    • Size

      96KB

    • MD5

      b22a06e7d4a6535a11285b16f3d3cabe

    • SHA1

      df28913c6ce20705c83f38aebdc1efcbdd5b540b

    • SHA256

      5352004bfd3bad3808db084748ab3191f1a26543471ceaba2a36f64da0f8cd1b

    • SHA512

      a058510dd3ac6244f403b766b4fa044a2d43eae251bcd2b5b35fc8940df78ea18ea1bdc6e2bad52fe6be9e21c72d66ced57a302de3c3415451f5285533302ca7

    • SSDEEP

      1536:nbSqbgNljxw66j/d0JiL77jI4yn7Tey4LOZjI9BhnKf5imUMP:bZKjL+RI4yn7uLOZGBhnKf5imUM

    Score
    1/10
    • Target

      dnssec-signzone.exe

    • Size

      160KB

    • MD5

      0183f1ab81b02260ac5352415b486a63

    • SHA1

      eac37b5401142fec3a404ad4810a808470f2dd3c

    • SHA256

      36bf09a10b6607231a1886a6cb901e1d160ef9e1c3a95ed9f387b2c227e9f61d

    • SHA512

      a70143529c7bbce8f714102d22a067d1f4382c3daabc7e16b591823319f0c4ebb81037f4d04484ed6eeed60f4b2fe256d92402207e3e248ce5be7a9cd8cad44f

    • SSDEEP

      3072:wKakbxI9UgM2Cqij+MMOZ7gtGdZPBp/+IQe59GUy1yPyt:fq9PMoiyNOZktmZvCyPyt

    Score
    1/10
    • Target

      dnssec-verify.exe

    • Size

      84KB

    • MD5

      60b48ffbcdac9f880f8b449b180031ec

    • SHA1

      f277de9b28f05e380e91d9c2671ef308268a2546

    • SHA256

      0fdb3cfe7b9989e524f564bbad4a09cb3a480eb4cf0a21ce61db89684f27aec1

    • SHA512

      a47061f01bcfaa87f9ea509425108dd25c293dfe53c20617f49ef811f75862dce4d26ecde9adb9b1e6fa406b8dd964d9e9c9ba7a961bbbbca98b833ea410152f

    • SSDEEP

      1536:dtzZvE0mJBDAKDDddeNxsukagV8uOZlgzKLfD59GUbY:dfxSAKveNxXkcuOZlgGL759GUb

    Score
    1/10
    • Target

      genrandom.exe

    • Size

      40KB

    • MD5

      c5bfbf826c840b8eb29eb2e2fe53f47f

    • SHA1

      61bd643b926a148f8b12ee84d212e7f250a3d96f

    • SHA256

      44577e5e8ef5cf6d07f4ae8928a97cd16c9068bee0c734fc1bc895459e19fc16

    • SHA512

      2985fac66d910e80c1ec08ef8e0696a92a5b589f6b1885bbd07f77f64a0c28a8420d6b09fffa60154c907bfcb310e00de5e2508813ce5b25173d3e84f14123dd

    • SSDEEP

      384:U3bh2enO44RXrSYfTzdGC4e7gTIPxwUbjtCeK6dP:U3bhy9rfTz7jIIGUVTNP

    Score
    1/10
    • Target

      host.exe

    • Size

      128KB

    • MD5

      8bd50378d66991c321ab2092dc2b1f6a

    • SHA1

      a269316e2ce47a73552f784f08d443be5a9e4523

    • SHA256

      99102031f4ff24aad1470ca607e6a6e71bdf0f1eee1015353cf6c328ffa7dcd1

    • SHA512

      c601ba6584fe91bbbefc0f1621aa2d6eb036760b66b2dc9a0b8f36192c5598c26b646f3c34045f0fd57bea5e2ba618d4c384c6ec34d0dd1f9673f128826dbf36

    • SSDEEP

      1536:g2PTuqGBvBtu5wseuWr1qU3TCbvY05tJZdHgxfhcZGU3gI:gUgdewp1pjC7YGnZdHgxfhcZGU3g

    Score
    1/10
    • Target

      isc-hmac-fixup.exe

    • Size

      40KB

    • MD5

      bac7154f3360968240d6b65284878ab7

    • SHA1

      5b5c37c485165137defd05eee8ca6dd412093327

    • SHA256

      c24d793ffa37c03e6d24d6ac10c4d0f1de85f96c9ee15f963cd7f671ccb5ff60

    • SHA512

      daeece551fb743e215847cf1015d6b4bf3c64a3d3e4871b9c0f41d27c00e3faada6923cc259c92bb8d84c442cc96030a52a6524d3e20654f49d881b2a5261012

    • SSDEEP

      384:lZQ/KHVjJzr8AHfWjBuG6vxwUbT6wzR/s6oP:l0kVjJzfuMmUCwhWP

    Score
    1/10

MITRE ATT&CK Matrix

Tasks