Overview
overview
3Static
static
3BINDInstall.exe
windows7-x64
1BINDInstall.exe
windows10-2004-x64
1arpaname.exe
windows7-x64
arpaname.exe
windows10-2004-x64
bindevt.dll
windows7-x64
1bindevt.dll
windows10-2004-x64
1ddns-confgen.exe
windows7-x64
ddns-confgen.exe
windows10-2004-x64
dig.exe
windows7-x64
dig.exe
windows10-2004-x64
dnssec-dsfromkey.exe
windows7-x64
dnssec-dsfromkey.exe
windows10-2004-x64
dnssec-key...el.exe
windows7-x64
dnssec-key...el.exe
windows10-2004-x64
dnssec-keygen.exe
windows7-x64
dnssec-keygen.exe
windows10-2004-x64
dnssec-revoke.exe
windows7-x64
dnssec-revoke.exe
windows10-2004-x64
dnssec-settime.exe
windows7-x64
dnssec-settime.exe
windows10-2004-x64
dnssec-signzone.exe
windows7-x64
dnssec-signzone.exe
windows10-2004-x64
genrandom.exe
windows7-x64
genrandom.exe
windows10-2004-x64
host.exe
windows7-x64
host.exe
windows10-2004-x64
isc-hmac-fixup.exe
windows7-x64
isc-hmac-fixup.exe
windows10-2004-x64
libbind9.dll
windows7-x64
1libbind9.dll
windows10-2004-x64
1libdns.dll
windows7-x64
1libdns.dll
windows10-2004-x64
1General
-
Target
a33172b938faad44c18c66b1ee689a93ec81299bff8a674a3ae8071aabd16bdd.zip.zip
-
Size
12.7MB
-
Sample
231107-ratglafh2z
-
MD5
1ff68e30a824978e028e10a19e6e5539
-
SHA1
bc78b0f0cab031c321cb614a445efa388e055088
-
SHA256
f054d07dccf8f200ea3838160e34aedceb0c7111d1434e6f0863f610e574a460
-
SHA512
31249486bcd089639537b95d4b3d666054627a7c0c2a076b49300ed1418e0267a53093c821cc58e58f3c016bd81757c52a7ef04fdf999de461f3a9960e365661
-
SSDEEP
393216:ze+kRcou7eSW+5JRJ5PsPRnO3Zr22xsn8trpsPXYEfTmeD:7o+eI5JT5PsPp6Zr2h8t6XBTmeD
Static task
static1
Behavioral task
behavioral1
Sample
BINDInstall.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
BINDInstall.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
arpaname.exe
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
arpaname.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral5
Sample
bindevt.dll
Resource
win7-20231025-en
Behavioral task
behavioral6
Sample
bindevt.dll
Resource
win10v2004-20231025-en
Behavioral task
behavioral7
Sample
ddns-confgen.exe
Resource
win7-20231023-en
Behavioral task
behavioral8
Sample
ddns-confgen.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral9
Sample
dig.exe
Resource
win7-20231023-en
Behavioral task
behavioral10
Sample
dig.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral11
Sample
dnssec-dsfromkey.exe
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
dnssec-dsfromkey.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral13
Sample
dnssec-keyfromlabel.exe
Resource
win7-20231023-en
Behavioral task
behavioral14
Sample
dnssec-keyfromlabel.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
dnssec-keygen.exe
Resource
win7-20231023-en
Behavioral task
behavioral16
Sample
dnssec-keygen.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
dnssec-revoke.exe
Resource
win7-20231025-en
Behavioral task
behavioral18
Sample
dnssec-revoke.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral19
Sample
dnssec-settime.exe
Resource
win7-20231020-en
Behavioral task
behavioral20
Sample
dnssec-settime.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
dnssec-signzone.exe
Resource
win7-20231023-en
Behavioral task
behavioral22
Sample
dnssec-signzone.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral23
Sample
genrandom.exe
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
genrandom.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral25
Sample
host.exe
Resource
win7-20231025-en
Behavioral task
behavioral26
Sample
host.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral27
Sample
isc-hmac-fixup.exe
Resource
win7-20231023-en
Behavioral task
behavioral28
Sample
isc-hmac-fixup.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
libbind9.dll
Resource
win7-20231025-en
Behavioral task
behavioral30
Sample
libbind9.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral31
Sample
libdns.dll
Resource
win7-20231020-en
Behavioral task
behavioral32
Sample
libdns.dll
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
BINDInstall.exe
-
Size
2.1MB
-
MD5
4ad41617bf612356d387f15f7b5ba47f
-
SHA1
b1348fda687b6044eec6a361fe67a05206462e11
-
SHA256
ab025611b748b86e438f5341f4be5f01f0962a47ca204182cd749e238c82639a
-
SHA512
f4825ddb944957732af61168b57cc3841a4e03c4359d387e0037cfafa5eca5cc900597ff7f2b7633fdb7677900a1e2f45c9d623f52bd87562c6ed0adc937dc8c
-
SSDEEP
24576:6PrY4zNJTGIib8PeEmT4seLU5pSNX5AmoQnRekxtITfb:6DTnGj8WqLNpzRC
Score1/10 -
-
-
Target
arpaname.exe
-
Size
40KB
-
MD5
8be6976f6fa4310abfd78345c6fd9f2d
-
SHA1
c040082bb46229cf5115aa4d2fb930315ea4beed
-
SHA256
b80da757fb5f5afaf0ac14377f97657ecf9ffc042a5174a345df2104afe84084
-
SHA512
98fd073ac15715897d81145767f1484f2ed337fc2d6f5f031d9642196b5e6d5d21d290f7ae7ececcd642d5e8d79d5314060a53261993627051be4bbec6056ee3
-
SSDEEP
384:IWsaAWdbuqBOziF9FmP7NVF6vxwUbMpVRjs6oP:IWsrChBOzK94hVYmU03WP
Score1/10 -
-
-
Target
bindevt.dll
-
Size
448KB
-
MD5
c35867a3c92fc45b0d6e8cc5c3cf3d97
-
SHA1
4c111318b9c5a92370af38755a15cd9bb1437c75
-
SHA256
045dc3badea4f221553fcd8c9c972a88e1bd831a3a91017606e501f876469074
-
SHA512
bdf595f4e56b71e9d98a3ad5070d3777c781c8c034bd7587ea4f7eda4778f4c76521d1c197dfc22755030d4d1884fc92eff186c3205166fba5e8d9bc42bb6a77
-
SSDEEP
6144:4Lyto9KMLecTR/bsUpbm97VQ8873FKBkDORsnb6ZYcZGdHiVXj:4LKo9PLecFTsU9m9E73FSRsnb6PMIj
Score1/10 -
-
-
Target
ddns-confgen.exe
-
Size
48KB
-
MD5
111b1cbadbfbd23c5ddaaa3b8bf9e1dd
-
SHA1
e9702e5d830d9b2cc4589a30f90c57ba19253948
-
SHA256
662e58551e24b27826a201703f5e6f7e2847bb32dfe87e7e5173b23734ae8eba
-
SHA512
825920934f46eb07c52c36f1d81138fc7b201d14f4601874a78377a839bd1d8a7916fe9c407a50979f4912cb6a32ee3cdbfba6ea442b3ddfc818633cb3c82f62
-
SSDEEP
768:6zLQRA7T5CzLHO4zOtLnm3bMAjmU/5P4xwP:6QWub2YbrjmU/51
Score1/10 -
-
-
Target
dig.exe
-
Size
140KB
-
MD5
346e03ad613fe5925b0c2cad059ccb21
-
SHA1
f95beb926d47ea9b1866e2ca73c703d0c5ada0cb
-
SHA256
03eef7d65ced347cc71c1fde0436a3014d99c26d9d7c3c28fdd1aa1468eed1fb
-
SHA512
e7a192e01e40c88a91e0427253517f5da61c84987b2ebbdd01327b9b3b35668b7ab1effe5c531b9e0251f9a0b2ff94b0f796dac96fec1f7ea88ded0051640b7d
-
SSDEEP
3072:dqt7PYR7XYTMesRDzgn6Z5bxDXpRmUeT:qM7XYTMevyPDXH
Score1/10 -
-
-
Target
dnssec-dsfromkey.exe
-
Size
64KB
-
MD5
d79f05570c67ce1c0d65082a253b4aef
-
SHA1
1bbb770e2cc2820a9a229b610dc1f606565df62a
-
SHA256
e93d064ddf367d13d485ec7bbb0ffabaf2ffe0317602d14d60dd99b78b85db85
-
SHA512
f76c0eb5943eec4c64a2c6c839156d42c3833f933e5cf64e3bccf0eac436d34f0b276a8424e9471d664e98b2e7dfc7cb78f7c9648ccdb53e84a26be0c312da49
-
SSDEEP
768:nrjv1qkXRNjDKqeaTsIL6z5tVN4jTBmUfXQwP:8eDKv0sptVN4vBmUf9
Score1/10 -
-
-
Target
dnssec-keyfromlabel.exe
-
Size
64KB
-
MD5
fa3d82804c5929942a74eee4a270ecdd
-
SHA1
848c560282345d67bd4a5bc3afe3722a5fe600de
-
SHA256
2c015543e9a1048eb8f8f3dafb0f5b647dc7ff3610ba27ff41d7bf49a5e735d3
-
SHA512
7168b737572ce4e59dc761ef36255d113491d5f9c38918e5c9b24dd02833987bbd142ac4f011af4a0a9a290f54859ac6858ad6da48c386b685b4d5b4bd659b52
-
SSDEEP
768:k4GUGg12WL5BF/yHXGE1KzjNKzip24slJtrmUcOULsUL+wP:CZg1DX/y3dip24s9mUcOesev
Score1/10 -
-
-
Target
dnssec-keygen.exe
-
Size
80KB
-
MD5
48990118c9e826aa4564693d80dbbf05
-
SHA1
b0212a301647fdaa52a9c78b0af99b58f9077920
-
SHA256
05957f3f07dc870221183404f12693a06dbe293baeb7e1fdb0252fe7fd4ba913
-
SHA512
b81f0b73ce6e5a0e0879ec71df82e7049b523ca0a3fce4f3c87218e2fc263d64dd440b9d21988686a0c627dd25dcc2d2c0d15161da91723b544efdc281c4f27d
-
SSDEEP
768:Mgn54SOFjSmzYvzT0oc1+zWF6g1d+JZ3KWgsXbVlNmU9wwP:Mjsvz49FZ1EJZ3KWgsXb1mU9N
Score1/10 -
-
-
Target
dnssec-revoke.exe
-
Size
60KB
-
MD5
b91fceabf13979d8a834837317772bdd
-
SHA1
67eec8007012dfdc4741de676fd4a470531acdf5
-
SHA256
30900aa280a51928b4b4c644c0155ed05e1374719c646fb5b607ca10842819fe
-
SHA512
b29a40b1db49d3083660335dfe03e815ad9c056c348cac829c0ac15e00022c5fb4b9ea633cf68df77df16c76cf6feffa4fc0300b13de7a0c0ac94683cde32542
-
SSDEEP
384:itiU6tFM+r7NE8PyJ0i5GDRz+NrmhzaCQE2utGZgS6vxwU5IWUYbsy6oP:cifHjPVzDRir8zonxZemUb2wP
Score1/10 -
-
-
Target
dnssec-settime.exe
-
Size
64KB
-
MD5
7553f699b16704016a176be52214cd51
-
SHA1
e44112439fbcb279274b86cad79fe25871c4b451
-
SHA256
b5727297bfc11aa90899250c804a680255f0711509d83c3aa00b96d1eb6f6225
-
SHA512
faef681f1a40b77e0aaeb3954ec497e80db1ebc5159524e695b5cf50c6437c9c2ca9d55a97f3e2ffac640de33395eed78725663e32381cafe7d55bda542f1a64
-
SSDEEP
768:v/SpUGWamruFjzUylZuNLJKefmz5y2tOYWKekmUAJT7OT7JwP:vKppFjjTuJHoy2tObKTmUAB
Score1/10 -
-
-
Target
dnssec-signzone.exe
-
Size
136KB
-
MD5
c756e37a369fe1170833ab7912249e28
-
SHA1
9fa7fae829295a073a1d8df20b1f0538d11e7afe
-
SHA256
7fd64d10457feb058ecfd2fa359ba75bfa12596c90da6a6664ee334c38ecf138
-
SHA512
240b02e84fe0f695d0dcd608c1bfd362939ef3a8b84a35dc9baa738809b265d1b58a8159de065a42221351eb04e847cdb6d6b00970aca2b1c359d72a8a68b518
-
SSDEEP
1536:UQt2PxofOcopFi5m4REg42LMlbojfYvnQFBsEmh//pf8alYWJvDx34GAjGUaER5U:Updc3j4LoFj9i6VWJvDx34GAjGUa
Score1/10 -
-
-
Target
genrandom.exe
-
Size
40KB
-
MD5
55fea76d356597489c18ad4307bd00d5
-
SHA1
3a6ff99b4cabb502d91875a999d52ed8d2066797
-
SHA256
e2637da016bd4025e2c518d9e843450c1d71bd6cf56daadf6ee0ff3b05e25d42
-
SHA512
81e86a8b84d79c555657bb2bb558c874dcc7f49a48abc845127913f23e96cffad454f20cb859a163dcbd86ce471018897b97f4f5465b78ab380f44d87cd1e91c
-
SSDEEP
384:WSuHRskrQsU5Ho04zu75yenQbywAgPxwUbg3i0eK6dP:Wj2Z5HofzG55nwAgGU+uNP
Score1/10 -
-
-
Target
host.exe
-
Size
124KB
-
MD5
5bda9a179cd1347ffb89ce56a7875a84
-
SHA1
04cd3f2ae551c97a65191b5c6d4dde9e0ed98f4c
-
SHA256
ad1c9d67915eac3c3649d6d729efa381ab30778553fb611947a04cb8d8215116
-
SHA512
a4f65909d5da1a4dad6a636a53cace4d614b3c8f18644bc64185e8d24c993cfa589a0c8566ffa31690087201daae7007875f04ff180fde636059cc7e33c491ee
-
SSDEEP
1536:1fs9jhPQrZQ6QFBhUTNqqhv217129YvauVKbxD32eGUfaDCu:1gQV+haqqx+712WauVKbxD32eGUfaDC
Score1/10 -
-
-
Target
isc-hmac-fixup.exe
-
Size
40KB
-
MD5
7cee6067514933fdaf9ef80413c23eee
-
SHA1
715ed88cb76fdad2f73595f3ae5b2d63ed51f1c9
-
SHA256
d6a0ca6454fb7e0d39aac0ef97d7a0e26fc5009148f3184e5a6ca3b83d17ed3b
-
SHA512
8d8ba9eab2b51d36eeb6835404b66b1d40f188ebf718ff9ff687069db66ab1e1b8d368e7282fd398615414e2fb3d03e68bbe033c015c08868a73b3f2f7581c46
-
SSDEEP
384:dZQ/KHVjJzr8AHfWjBuX6vxwUbTMuzR3s6oP:d0kVjJzfu3mUUudWP
Score1/10 -
-
-
Target
libbind9.dll
-
Size
92KB
-
MD5
7800722532df3363088cacfa5c564e84
-
SHA1
7941f3536e56248e5177b67212bae2fda42d2434
-
SHA256
b6064e7ca5f48a088fc447035ba46f0c13680e05b9ff4f1f0475d0f225da2e39
-
SHA512
592b20d34d27863bcebba8e021f3641e9d4ee0270c4e5d2bc83caf3dcc969adabb291a546ba8bca893d0c3a617d77c7b3832aa7ec59389f23e09c4754a0afc24
-
SSDEEP
768:tlKNGsRjOK56IFXxzgioBidbEUvtVmayzKKzzf1IJ3xIzUjmUpp0XPrPOn:nKfxOOyindjvt4aG9IVuzUjmUpgPri
Score1/10 -
-
-
Target
libdns.dll
-
Size
2.3MB
-
MD5
20e28a90ca8ded6935162799c08551af
-
SHA1
08072425b7faea45ae04f65a2c51a3524adf007d
-
SHA256
eb9180af457e6cea7ea4685a27cbbf45283fd87fda1a45a37f5d439a1ea2731f
-
SHA512
37dd266db8efec4d28a7692be6c2f9a4f82a3f6c8e54ddd41e79b5f101eae72666d21e0e1caa0a97a39383f4d11463cf87c88d326e7153cc6303daa87d13e157
-
SSDEEP
24576:brkWz2y/P7ObBkDBgNXmIMNSeFaTWPSeh461EdjSktEH4S3CctGIsbGhRzfsPOgx:IsP75B+2uGVyIZhRzfsPOgq2H5ml
Score1/10 -