Overview
overview
3Static
static
3BINDInstall.exe
windows7-x64
1BINDInstall.exe
windows10-2004-x64
1arpaname.exe
windows7-x64
arpaname.exe
windows10-2004-x64
bindevt.dll
windows7-x64
1bindevt.dll
windows10-2004-x64
1ddns-confgen.exe
windows7-x64
ddns-confgen.exe
windows10-2004-x64
dig.exe
windows7-x64
dig.exe
windows10-2004-x64
dnssec-dsfromkey.exe
windows7-x64
dnssec-dsfromkey.exe
windows10-2004-x64
dnssec-importkey.exe
windows7-x64
dnssec-importkey.exe
windows10-2004-x64
dnssec-key...el.exe
windows7-x64
dnssec-key...el.exe
windows10-2004-x64
dnssec-keygen.exe
windows7-x64
dnssec-keygen.exe
windows10-2004-x64
dnssec-revoke.exe
windows7-x64
dnssec-revoke.exe
windows10-2004-x64
dnssec-settime.exe
windows7-x64
dnssec-settime.exe
windows10-2004-x64
dnssec-signzone.exe
windows7-x64
dnssec-signzone.exe
windows10-2004-x64
dnssec-verify.exe
windows7-x64
dnssec-verify.exe
windows10-2004-x64
genrandom.exe
windows7-x64
genrandom.exe
windows10-2004-x64
host.exe
windows7-x64
host.exe
windows10-2004-x64
isc-hmac-fixup.exe
windows7-x64
isc-hmac-fixup.exe
windows10-2004-x64
General
-
Target
40857033ca928a1f02edf6f1bde178034139f2f419cba7bc022b6cf8bad1c7e7.zip.zip
-
Size
13.6MB
-
Sample
231107-r6559saf8z
-
MD5
7280594bec35187f2112b49198b6e16a
-
SHA1
651e3729ece1ae84fc1b8190b1cb2381ee109070
-
SHA256
77414893827a2701c60c3afcc0460284e5c843b38565186c9acf066ef5d6ee12
-
SHA512
69ae19449a7adf7c0958cbc9a184691d8afc9a9d64a851a1ac9d470b4a92ddf2878d9661cde05600dd40d3a990637b9b64e0fee3580824489ed2019f9a2e7475
-
SSDEEP
393216:rpcOvnLlVFltpkd7IKiJu0VKi1TKiYz/o9YK7:dc+nZVFlPbP1TKNNa
Static task
static1
Behavioral task
behavioral1
Sample
BINDInstall.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
BINDInstall.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
arpaname.exe
Resource
win7-20231025-en
Behavioral task
behavioral4
Sample
arpaname.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
bindevt.dll
Resource
win7-20231025-en
Behavioral task
behavioral6
Sample
bindevt.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
ddns-confgen.exe
Resource
win7-20231025-en
Behavioral task
behavioral8
Sample
ddns-confgen.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral9
Sample
dig.exe
Resource
win7-20231025-en
Behavioral task
behavioral10
Sample
dig.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral11
Sample
dnssec-dsfromkey.exe
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
dnssec-dsfromkey.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral13
Sample
dnssec-importkey.exe
Resource
win7-20231020-en
Behavioral task
behavioral14
Sample
dnssec-importkey.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral15
Sample
dnssec-keyfromlabel.exe
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
dnssec-keyfromlabel.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
dnssec-keygen.exe
Resource
win7-20231023-en
Behavioral task
behavioral18
Sample
dnssec-keygen.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral19
Sample
dnssec-revoke.exe
Resource
win7-20231023-en
Behavioral task
behavioral20
Sample
dnssec-revoke.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
dnssec-settime.exe
Resource
win7-20231020-en
Behavioral task
behavioral22
Sample
dnssec-settime.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
dnssec-signzone.exe
Resource
win7-20231023-en
Behavioral task
behavioral24
Sample
dnssec-signzone.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral25
Sample
dnssec-verify.exe
Resource
win7-20231023-en
Behavioral task
behavioral26
Sample
dnssec-verify.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral27
Sample
genrandom.exe
Resource
win7-20231025-en
Behavioral task
behavioral28
Sample
genrandom.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral29
Sample
host.exe
Resource
win7-20231020-en
Behavioral task
behavioral30
Sample
host.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
isc-hmac-fixup.exe
Resource
win7-20231023-en
Behavioral task
behavioral32
Sample
isc-hmac-fixup.exe
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
BINDInstall.exe
-
Size
2.2MB
-
MD5
0f9ad438d8efd8ac4b11538f0975e981
-
SHA1
cc4c75a386703543fc084805c9f0cf8dbecb52cb
-
SHA256
bf2177dece58fb5f3dd0bfe7735c9544c99da60038a53ab3c01340e3531ffa25
-
SHA512
e3d64a34d535633104f25b2316ff645d0f5db587f1d72c3fe58fe454f84c58bf496f17d2825a6e06dbc9e1bdd085ff7aafc7780b04f2cc69ca7289b966d16c67
-
SSDEEP
24576:dc7K1WKCtfNZGOUk1Z9OLlZqvka6b67AXp/wuI9PUVKiQUlrwob61Ow8:RcKMVZKQElQQtXICQmO1B
Score1/10 -
-
-
Target
arpaname.exe
-
Size
40KB
-
MD5
b62616ff0e0cd3410e81d2efd2584801
-
SHA1
5890624057b838fd69db4a49703d581aa17d53b8
-
SHA256
73b611dfa60d65ba63f131d9ab7cd4d01df7898933787e00a8ec539bf2fc907b
-
SHA512
95860e0ac2cc84bee92a3488ac96a2aaba23531b68b0620d7f5e3d1abd397ec54f519665e3ebb5976e9a0b5f718a35e397c8fe99e8748a3b432b01a82f36a6c2
-
SSDEEP
384:5WsaAWFbuTZOzixPFFmP7NVo6vxwUbMEVRfs6oP:5WsrakZOz8PF4hV7mUL7WP
Score1/10 -
-
-
Target
bindevt.dll
-
Size
448KB
-
MD5
8412441f1a4050ebd2da65b3d2c92cd9
-
SHA1
e70c320a12b5136e740c89e343409a379838a9de
-
SHA256
bd8f1be308f8b21405d5eb4eb859e0c8e566c93ddfbf5e06dc32b38af5e27981
-
SHA512
a4c2576cd09764acbf168933122bd7ef103f782316563c8e740cea295ed5d0a52efa1b394e3bfaf33bea29fd0f803e4b15b3c1db5a8879081a9044ccddc2120c
-
SSDEEP
6144:CLyto9KMLecTR/bsUpbm97VQ8873FKBkDORsnb6ZYrZadHiVXj:CLKo9PLecFTsU9m9E73FSRsnb6Q0Ij
Score1/10 -
-
-
Target
ddns-confgen.exe
-
Size
48KB
-
MD5
3715c34d1b4542f61d705de1ace9a028
-
SHA1
c0836e3cfbcc2b1b10ff47169bc33a449a868e52
-
SHA256
578e5544a5802838aabb4658147cd869f40b32f713b38f6ef28ed8caf6d8e317
-
SHA512
4db3d8dfd058acd8e22cb5938cd1e17dcb3d005ca6ee77a13ac4b247e4022d443a25ab10c70205d6a3a12641c607aeb7200dadf617969c5ba7d496be370fc174
-
SSDEEP
384:kRa5PweK8ZEhXl8AuIULuGHvZzsORZxn0tKlAy6vxwU5TJA32+5Qy6oP:Ya5PwCCl45PZznZx0sAVmUrAwwP
Score1/10 -
-
-
Target
dig.exe
-
Size
152KB
-
MD5
79a9ef01dd164018c13563420c781ac6
-
SHA1
7b7046c6ae796f9897faed0a4abc8fd5f3b11e86
-
SHA256
15f17db805972bdcbf2927158da11fbd74cfea4d3291339e0f9e42dd17b21282
-
SHA512
e5dec484437f79f0bf414fd2ea6ba0660c7636b8ebe8b80bf1a142a1359972805a49f457ca2621fee2b6a0e3f6a489cef2bb98d83243638ad0f554a80ed2dad5
-
SSDEEP
3072:lrdvB3DJqfQJz6n22qk4HVqxfBjamUzLbbb:dlx623H4fBO
Score1/10 -
-
-
Target
dnssec-dsfromkey.exe
-
Size
96KB
-
MD5
bd27341791b1761657c3f642783543cf
-
SHA1
30c2a0fe29f43e94b64c44452137fbf27bcb42c0
-
SHA256
a0d14eab3781d0a0c684c088b758861328a55b23d2e246545a6c3a173c495329
-
SHA512
aa218d04d9531567ca7dfc66da46ed4dbe8a5e584ac110841d8fbecc020e0cc617d7766beef8cbb43c932e0ef9c466311b54700d12e343468f952bd2f9a9ca7f
-
SSDEEP
1536:uLQD3MC9cEs4ItMmbOVXsrcjXrzOZ3NWFkmZ8nv5lmUtelwIi:uPimbOJsrU3OZ3NWFj8v5lmUtS
Score1/10 -
-
-
Target
dnssec-importkey.exe
-
Size
92KB
-
MD5
40e1d970bafa07a12da0fbd457b2b629
-
SHA1
e8504c125fb0ef8c9e5a270706738ac15c4f9742
-
SHA256
0f6838f9fef1f4c4ede4d07bcd026fcc9a6616aa011bcc7316cb4227eea66812
-
SHA512
8b43cbe15623b04b3c323784087e28f4887ac5405edefc21d33283a14928013ff4dce240147c0157a0342ffb976daf53b39619db2c8d7814cbf65843b4a8ec82
-
SSDEEP
1536:a19jJ+HObWbMsXf9bx8LS3BKOZYtUpEVb5FmUB6X:UfsXf9bx8LQKOZXpEVb5FmUB6
Score1/10 -
-
-
Target
dnssec-keyfromlabel.exe
-
Size
96KB
-
MD5
b7b268f190bb5d302afadaf10a9a9ce4
-
SHA1
d2cc1dd568e1b33d0272b4ad05c3ae3db4ccb43d
-
SHA256
29d7afae735f9dabb9d23d23ad73c9e911471964571aede76a788ff741f53f62
-
SHA512
80120300c4b66c8ee2116a3940604ca664056de714249d9a2d3fc085a840face1aa5e0ac5b2d2931476673e7c0728ab4522e15692d806391c7c8f9195dd5d944
-
SSDEEP
1536:wGeDz76izTlDyIf6rtCEyUBzD3IOZO9mnlTJZ3KWgX55imUTq:z0y5DyUBnIOZO9mnlTJZ3KWgX55imUT
Score1/10 -
-
-
Target
dnssec-keygen.exe
-
Size
104KB
-
MD5
2c4c204e40bda0d29b208adcb514ac22
-
SHA1
6bc9fd58d5fece3972285728102ca410256be7fa
-
SHA256
af21ac855324266b3dbb73bc08e8c33501dea609ee58126e0736907b82335c98
-
SHA512
f33b614d62fe2c1a713d4a0ffa27a28d3ca15c8bebbbb3c00146a1dbf46d127e2f92c4c2dc916550351e6be2d8cb73a08d080aa44854350879625553444c303a
-
SSDEEP
3072:Q2jV9mm+ddtl1aOZaArJZ3KWgsX9J5imUP:Q2jVp+drKOZXY
Score1/10 -
-
-
Target
dnssec-revoke.exe
-
Size
84KB
-
MD5
2279645fd8d9abbc27da5270ae41e235
-
SHA1
98de620dc19a46cc96459247df26540cc2bd7766
-
SHA256
c6ddd9330038e133ab8c7594ea940c515f0917d1456d545e3dd35eed8462492a
-
SHA512
17041580e1227c8e33bf6a239e88b662ee1a0951a96afaf133dc90f7d254c634361b5184e80c4c7a9ed47f5efc0390080a5fbd22fd91fc6d18f1e8fd34893106
-
SSDEEP
1536:Uja1AQjxHTU/2J/UZHzEdNvrZ1Aaf/XOZioStr8N5CmUyO6:82u2Jyz4NvrZGKXOZioStrm5CmUy
Score1/10 -
-
-
Target
dnssec-settime.exe
-
Size
96KB
-
MD5
b22a06e7d4a6535a11285b16f3d3cabe
-
SHA1
df28913c6ce20705c83f38aebdc1efcbdd5b540b
-
SHA256
5352004bfd3bad3808db084748ab3191f1a26543471ceaba2a36f64da0f8cd1b
-
SHA512
a058510dd3ac6244f403b766b4fa044a2d43eae251bcd2b5b35fc8940df78ea18ea1bdc6e2bad52fe6be9e21c72d66ced57a302de3c3415451f5285533302ca7
-
SSDEEP
1536:nbSqbgNljxw66j/d0JiL77jI4yn7Tey4LOZjI9BhnKf5imUMP:bZKjL+RI4yn7uLOZGBhnKf5imUM
Score1/10 -
-
-
Target
dnssec-signzone.exe
-
Size
160KB
-
MD5
0183f1ab81b02260ac5352415b486a63
-
SHA1
eac37b5401142fec3a404ad4810a808470f2dd3c
-
SHA256
36bf09a10b6607231a1886a6cb901e1d160ef9e1c3a95ed9f387b2c227e9f61d
-
SHA512
a70143529c7bbce8f714102d22a067d1f4382c3daabc7e16b591823319f0c4ebb81037f4d04484ed6eeed60f4b2fe256d92402207e3e248ce5be7a9cd8cad44f
-
SSDEEP
3072:wKakbxI9UgM2Cqij+MMOZ7gtGdZPBp/+IQe59GUy1yPyt:fq9PMoiyNOZktmZvCyPyt
Score1/10 -
-
-
Target
dnssec-verify.exe
-
Size
84KB
-
MD5
60b48ffbcdac9f880f8b449b180031ec
-
SHA1
f277de9b28f05e380e91d9c2671ef308268a2546
-
SHA256
0fdb3cfe7b9989e524f564bbad4a09cb3a480eb4cf0a21ce61db89684f27aec1
-
SHA512
a47061f01bcfaa87f9ea509425108dd25c293dfe53c20617f49ef811f75862dce4d26ecde9adb9b1e6fa406b8dd964d9e9c9ba7a961bbbbca98b833ea410152f
-
SSDEEP
1536:dtzZvE0mJBDAKDDddeNxsukagV8uOZlgzKLfD59GUbY:dfxSAKveNxXkcuOZlgGL759GUb
Score1/10 -
-
-
Target
genrandom.exe
-
Size
40KB
-
MD5
c5bfbf826c840b8eb29eb2e2fe53f47f
-
SHA1
61bd643b926a148f8b12ee84d212e7f250a3d96f
-
SHA256
44577e5e8ef5cf6d07f4ae8928a97cd16c9068bee0c734fc1bc895459e19fc16
-
SHA512
2985fac66d910e80c1ec08ef8e0696a92a5b589f6b1885bbd07f77f64a0c28a8420d6b09fffa60154c907bfcb310e00de5e2508813ce5b25173d3e84f14123dd
-
SSDEEP
384:U3bh2enO44RXrSYfTzdGC4e7gTIPxwUbjtCeK6dP:U3bhy9rfTz7jIIGUVTNP
Score1/10 -
-
-
Target
host.exe
-
Size
128KB
-
MD5
8bd50378d66991c321ab2092dc2b1f6a
-
SHA1
a269316e2ce47a73552f784f08d443be5a9e4523
-
SHA256
99102031f4ff24aad1470ca607e6a6e71bdf0f1eee1015353cf6c328ffa7dcd1
-
SHA512
c601ba6584fe91bbbefc0f1621aa2d6eb036760b66b2dc9a0b8f36192c5598c26b646f3c34045f0fd57bea5e2ba618d4c384c6ec34d0dd1f9673f128826dbf36
-
SSDEEP
1536:g2PTuqGBvBtu5wseuWr1qU3TCbvY05tJZdHgxfhcZGU3gI:gUgdewp1pjC7YGnZdHgxfhcZGU3g
Score1/10 -
-
-
Target
isc-hmac-fixup.exe
-
Size
40KB
-
MD5
bac7154f3360968240d6b65284878ab7
-
SHA1
5b5c37c485165137defd05eee8ca6dd412093327
-
SHA256
c24d793ffa37c03e6d24d6ac10c4d0f1de85f96c9ee15f963cd7f671ccb5ff60
-
SHA512
daeece551fb743e215847cf1015d6b4bf3c64a3d3e4871b9c0f41d27c00e3faada6923cc259c92bb8d84c442cc96030a52a6524d3e20654f49d881b2a5261012
-
SSDEEP
384:lZQ/KHVjJzr8AHfWjBuG6vxwUbT6wzR/s6oP:l0kVjJzfuMmUCwhWP
Score1/10 -