Overview

overview

4

Static

static

4

BINDInstall.exe

windows7-x64

1

BINDInstall.exe

windows10-2004-x64

1

Bv9ARM.ch01.html

windows7-x64

1

Bv9ARM.ch01.html

windows10-2004-x64

1

Bv9ARM.ch02.html

windows7-x64

1

Bv9ARM.ch02.html

windows10-2004-x64

1

Bv9ARM.ch03.html

windows7-x64

1

Bv9ARM.ch03.html

windows10-2004-x64

1

Bv9ARM.ch04.html

windows7-x64

1

Bv9ARM.ch04.html

windows10-2004-x64

1

Bv9ARM.ch05.html

windows7-x64

1

Bv9ARM.ch05.html

windows10-2004-x64

1

Bv9ARM.ch06.html

windows7-x64

1

Bv9ARM.ch06.html

windows10-2004-x64

1

Bv9ARM.ch07.html

windows7-x64

1

Bv9ARM.ch07.html

windows10-2004-x64

1

Bv9ARM.ch08.html

windows7-x64

1

Bv9ARM.ch08.html

windows10-2004-x64

1

Bv9ARM.ch09.html

windows7-x64

1

Bv9ARM.ch09.html

windows10-2004-x64

1

Bv9ARM.ch10.html

windows7-x64

1

Bv9ARM.ch10.html

windows10-2004-x64

1

Bv9ARM.html

windows7-x64

1

Bv9ARM.html

windows10-2004-x64

1

Bv9ARM.pdf

windows7-x64

1

Bv9ARM.pdf

windows10-2004-x64

1

HISTORY.vbs

windows7-x64

1

HISTORY.vbs

windows10-2004-x64

1

arpaname.exe

windows7-x64

arpaname.exe

windows10-2004-x64

1

bindevt.dll

windows7-x64

1

bindevt.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    d140348bd038921f12a5ed34c81026cd59b997358c880e64e42bba0ac9440e9f.zip.zip

  • Size

    6.3MB

  • Sample

    231107-raq2gahd32

  • MD5

    3656dce6d9d6fd6c12fadd9e6d49259a

  • SHA1

    1694b9f2c40e658bf86a4dc08b1b60128f02ae26

  • SHA256

    73957fd1f888a8f94d3c2396e52cce5ba48b8443960edac35caa1ff4715f51a0

  • SHA512

    780b34d8415f2270b12b1fb1bb7a4ed5c8b56643d76e35aaa5d9eb1a30a65865b39879a83ef5d5baf9fe0960f90d60d8bf593a6f213946e1aa729214fe66ef0a

  • SSDEEP

    196608:KA7sTRvpEFdjLu+P/DtQYGNSSaTAW7q5+4lWfd6:K1Ba8+P/sQS7tmfd6

Score
4/10
linkpdf

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      240KB

    • MD5

      5c621a3d653088f7eee5682697f88821

    • SHA1

      ffa26b2265aaeaa1c93fe3e62c42fdaae7815035

    • SHA256

      aede5a612dd643706759d15c9f80384452f2ac2f65179c05a298352ca4eb8344

    • SHA512

      5ae8e16d09e1c6a323eb98768f9e297769ee244df70d3820c284d760ba9eb7465c430368a087f0e43638eeab844ced530790c1d1ae15cf03b7b94ca9b79f9c4d

    • SSDEEP

      3072:0P7eYLoTZZLISro1XgfPcofYARuRqEjEiryJeETa+61qgNmJMtWoE/ETbG:seD9RISro1QfUofA06EieaNrxEZ

    Score
    1/10
    behavioral1behavioral2

    • Target

      Bv9ARM.ch01.html

    • Size

      24KB

    • MD5

      9dd8912adac6508b3e21d0b0695fdd14

    • SHA1

      a1f51aa1a73540730b27797429a30da6893ba913

    • SHA256

      6051d7396c7f17e0f9a2597838c63bd201a46befcf41b1459bdb4c61198a4634

    • SHA512

      b7cf59d5df3463af78f28a5edbcb49eb647c32b97c529075195d08847277eeefac25131983b405a04401e55c58a816af5d3f3ac4c9028f025b9caf97ea7a1b21

    • SSDEEP

      384:ZyvOXFYNRhwYbTYLztAD4OOZASl+X186ggGpZ8W:Z0O8WEYdZA1X1WpLJ

    Score
    1/10
    behavioral3behavioral4

    • Target

      Bv9ARM.ch02.html

    • Size

      7KB

    • MD5

      3a9cb96f44a0b56377ada7f9e5e0b1db

    • SHA1

      70be6139b05347df6512fb0f531b62dccb3bd5c2

    • SHA256

      f88e732730e32af83f96ea16639b2c02a782c65c49caee6cab99b3da5fdfe4f8

    • SHA512

      08df5e4db743a01a6162608cc149d62444404786f91add0be4f3e63a67a4a4675defc891493e00f20b7d9b933cfdb07a8402de9a02f4ae525f6126c4e52421e7

    • SSDEEP

      192:ZyvOHJQlNSgqkDqjaBKmmGDdrvvI16lU2Url/EBzTRcnV3IuFm0:ZyvOpAYjALj+Wy5J

    Score
    1/10
    behavioral5behavioral6

    • Target

      Bv9ARM.ch03.html

    • Size

      52KB

    • MD5

      b206bb0876cacbdb4d0d447236ec03df

    • SHA1

      1be5953d49f2f9ea250a2167aaf4de3866f7a087

    • SHA256

      d6dea2814f1dcad9261d6d63a8cdd7864797a03b26c75a8bd17a042de4bfdf55

    • SHA512

      21f82a65d61d2b4c3e34a7380b01f3d312e837875cc1ab133746b542579104cc303b8432cefeedfce475b61459831860a5c3179598284f3580a1e8b610cf00ad

    • SSDEEP

      768:Z0O+3tOxtbdjxvijhf8Ge0ENAaK/gZu3WDRCw:Z0O+9Oxtbdjxqjhf8Ge0EI/gMM

    Score
    1/10
    behavioral7behavioral8

    • Target

      Bv9ARM.ch04.html

    • Size

      94KB

    • MD5

      81717759103adc7a80917fad41d77a1c

    • SHA1

      7711487ac23b50926b40b5e1bc57aac62226976e

    • SHA256

      3a4cb6c7117f89ebfc9aa31a25be016e89dfd8db6b6a99b7df023824ea684933

    • SHA512

      0a8adbf561fad8bc004104a8c1f1234a6fc738056947e98ea36fff3262bdeab0226afe597ed74afcc3ace251e7fae3a61704452d749ecf35be38196a59ed0574

    • SSDEEP

      1536:Z0OG3nAmC6w4TqoLJTxOAVgBnW3mWmJWas1zf:Z0jAmC6yZw3Hm8ayf

    Score
    1/10
    behavioral10behavioral9

    • Target

      Bv9ARM.ch05.html

    • Size

      6KB

    • MD5

      b9e052e266d8df39f0779309b61bf6b9

    • SHA1

      fc9102b1cefd8523ce8bea62816be1a1a2e6f016

    • SHA256

      8980eacba1059a74219f03e1ca9ed1ef8f7ee9f12d01205c16a49598ef5b174a

    • SHA512

      d4ec404184647ca28c520189a198f7d395ce524eb50e4ea9c3c5c38b473a6b95793b6775808c6ac9252a98c8128828f75b4ea05b23a3dfcdadd266d6cd8b0086

    • SSDEEP

      192:ZyvOHU4cNSpnfiAXSkKZHlyK6Qar08+jg4gY0:ZyvO0vYkk4H8Qi4C

    Score
    1/10
    behavioral11behavioral12

    • Target

      Bv9ARM.ch06.html

    • Size

      530KB

    • MD5

      65425ab8ea50ccb9dcbb226f1c72758e

    • SHA1

      87270d8ca35c433ddf3734bbbe95258afaff1544

    • SHA256

      6946982e693572cdffcfcc661b1e5a59592529b0cb871e94f0bbf99f312ee76c

    • SHA512

      5660aee6d5b64b43160184b9431670b2839624e1d1b85c067ff98a8233a5458a746470fdb0b0afb12c78779bef6f8b962241b3e08bb80404bdca78ae37d2ef80

    • SSDEEP

      3072:Z0Oz9I3iaHEEhAkHp/1ZMAfq9qeSz1VmN/5SfAdVpYVp4tVGCXt5RPzj52:Z0I+HEDkHlvW5SaVGM5RP52

    Score
    1/10
    behavioral13behavioral14

    • Target

      Bv9ARM.ch07.html

    • Size

      11KB

    • MD5

      5d5a0260b9b1be7a635f972e988182b2

    • SHA1

      20d141a62d6ca1b4cba6f75af275e24f1675c18a

    • SHA256

      cba6403093b45d111ffd236cb60ea379039a4ab4759349e0e857e78fbab83767

    • SHA512

      1d91b3b26ad2e73bcdaee517f6c8640c85dd91c1267e59f25f2989f799fae6dc319581050439d70ba04182e94ca23b327c32e10ee111024410247759d2e272bd

    • SSDEEP

      192:ZyvOHk1FNSMuoTzGbOTtsorz4k9h6B3QrK9h/0PkmP+YCBF0:ZyvOErYOjtsoLUpOPqm

    Score
    1/10
    behavioral15behavioral16

    • Target

      Bv9ARM.ch08.html

    • Size

      6KB

    • MD5

      e3ed014455571befc4d95ded3dac1ef7

    • SHA1

      949fcdaefd1ff78ea6c73892a2fbd251aa85cc7f

    • SHA256

      a68a3f8ee4af2f3bd328d265ce8c16db0e06e50fb6c594d62008e558467bedcc

    • SHA512

      0aba29eb44b12ff32b3a1c1f7ac44214396c8291715760d0100edaaf1a0d8d775730e012fb2a077466a45c6bd73c6ef92341141aacde80981e36478ec51d8f78

    • SSDEEP

      96:ZBAvOHe5T4P0VVoIJNaLga+AK3fmeeX1bJL6eteDteL3NedL3n2AekgonFPmnFYH:ZyvOHmDJNSigoANyXFmyGivN80

    Score
    1/10
    behavioral17behavioral18

    • Target

      Bv9ARM.ch09.html

    • Size

      67KB

    • MD5

      95068afdf2f3c7967cc7a24bd744ec90

    • SHA1

      5491b7c66262970479799c6015a79918d05d3cff

    • SHA256

      988775bff2f1a8d5da01162468cb0586154e9d73b9ea716d3bd37aeccba6152a

    • SHA512

      7aede0081838fdfd9ae2e408f975551bc8c426280ee84c1fe52c911a17e64f4e9ea8b684c980b2a7a885f9cd39758b3e214a7bbb52592bcf2e335caa904fcfa1

    • SSDEEP

      1536:Z0OEUVJXFjwP+W+WZcqSCMEgSxMgeXkWZ:Z04V8H/ZcqSCMEgSxMgSfZ

    Score
    1/10
    behavioral19behavioral20

    • Target

      Bv9ARM.ch10.html

    • Size

      6KB

    • MD5

      eafbc5930737621e96e3572d1cb719f4

    • SHA1

      1f11dc541f11ad5a7011bcb052388c52a2e0d268

    • SHA256

      919e5397232de541ca532f83360c77c7c12cd03183678150766cf4cd47acb907

    • SHA512

      bfb6e9e5ddd06688e7b79b36f0daa8b1c401bf2b555888007479dea8ee1c4602b3fca16aa0cf617defdb979654b5b6dbdcbbc68181fab524c2b988b9d7459202

    • SSDEEP

      96:ZBAvOHe5T50VV2yNaLgAAKyfdytI4gYI7XJ4zJa1JUC/byKD+qmWzrzbKpmAbsdU:ZyvOH5OyNS28toma1tDHaHPTy0

    Score
    1/10
    behavioral21behavioral22

    • Target

      Bv9ARM.html

    • Size

      24KB

    • MD5

      e2bc8862b5c3c56b4af7283cf5405497

    • SHA1

      df312b198bf967641909dcb0b925a351e46d9993

    • SHA256

      8408019425e8256f694713534fdd34f0fe09f1dfba112712995872d91b27d9e6

    • SHA512

      3a749e9c86bf09af6b80f09a8d04a8806ecf7818334effd8a1377ccbf871ffb891de87c4c3645d4396cceedc0ae8c6fcb38d547862d63d923e9af1499b10366a

    • SSDEEP

      192:ZyvOHNepNSpKeT4Ip3hkjUBrAoNLXqMZkeAkKb3dGBfSBuEn+oma1tDHaHzz0:ZyvOt0Yw24IRhwoNDQe/G3DHa0

    Score
    1/10
    behavioral23behavioral24

    • Target

      Bv9ARM.pdf

    • Size

      1.2MB

    • MD5

      7bdd265043be9518fa823d69984c5dd0

    • SHA1

      85bc98c71860fa10da1289222fe041658826b2e1

    • SHA256

      4a5febe7a6c9a594e88d4680235ac710c4370f1a1e2b8ef36e6a62c55b809e35

    • SHA512

      f86d30348c19c8160ba4ffbe93e8c003314f53dfc4d3b33aa76a42f4ddc3496c3a7b58c73d466fe043a2ac21e8e85160aa7af8865326400851b31c02822a4127

    • SSDEEP

      24576:4wizDOZJO+arxyJslhNkc9a6/JDptvt3nx:rg4JO+a9l75tl3x

    Score
    1/10
    behavioral25behavioral26

    • Target

      HISTORY

    • Size

      12KB

    • MD5

      2feeb17a6a7482bc921b5237bee501f8

    • SHA1

      e8443f27d1f4b20d4078cfabe7b06f39e368e9de

    • SHA256

      9e94b8d31a98b209ae40f7ced094656455d1b3d1997b46e7f2d55173190396b2

    • SHA512

      ab26e3daae2aa0767919d8a3bdd77d566ca27bcfce844e2cf95083048ea621cbd57cfc66f91036116349e6d7c44361c301e23351634db335be7e29a8b50dc2f7

    • SSDEEP

      384:JUdIFHwblfSldLjb/OXX6S4vc4MSWA0Njw:JItbZSlBjb/sXH2WbG

    Score
    1/10
    behavioral27behavioral28

    • Target

      arpaname.exe

    • Size

      6KB

    • MD5

      65b4c3061d9daa3a14ced293248aa66a

    • SHA1

      e01b48121c04e5765b6460bc92c1854862cc4a74

    • SHA256

      0b5445b6cc99e593a26820cecd30010f371842abac564c261b28fbcc1fed7021

    • SHA512

      aac5ddf1bd1fa616543543efe7a7e6fc42fab65a3678f899488e1bb25c25068b5b72148900ac96532cddfb53ca52a3c314817b49130100357d5633962d1ed880

    • SSDEEP

      96:Mj64kOrFRlKzmdTkDDMZ71+Tj+ZPMTcWdi6cZkqAoMVthBi:MjNkmvZ71+v+NMTcWdi6CkqVGk

    Score
    1/10
    behavioral29behavioral30

    • Target

      bindevt.dll

    • Size

      52KB

    • MD5

      d0b5f1a5f6e9802995421d152ade0fbf

    • SHA1

      fe4a2c4ac5fbec5e048439d8d160b91e8233af66

    • SHA256

      ebb9a4c5506fa7ed2eda64690a25d84df5f9cac7d9a0857cd3302c57bd9d7b60

    • SHA512

      e7ee205abfbfef3cea958cd2c17260ef944aa37f9653f194fa7a4cc48bc8429c3acbc25b8633b8d9cf658f7c3c996db007d3639338faad0c3bd1a74df9466dae

    • SSDEEP

      768:sXTQ3dz80P3mkj0wWyRepPVJuiNdVtPw:sX4HVj0wWyEB5tP

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks