General

  • Target

    6072c9f33bf015ea33c747b9cb5e761746be0326f05848c93c51ecbcd226955d.zip.zip

  • Size

    13.7MB

  • Sample

    231107-rhjmcsge6z

  • MD5

    781e8bb49a877057ded231187c396f1c

  • SHA1

    eec3240fbf2bab6625460b08ab43fddd1ed2553f

  • SHA256

    6720eedcf1c4f6b62bc8a47121a63edc9001d510a2aea5a8046dcc8f6d2b1acf

  • SHA512

    2da572e0c5ecca143d3831b8c3b2efc04e56a5dc58c5eddd3578fbd530a9c6853bbce82dc57d91594c6ed2c030a7c87ede1ef63769979955057cd1af9f8d948d

  • SSDEEP

    393216:envG0UmCYvEeEXdDL0iSKi19/IGSrJ4RQCMqy:WG0UmCYnEX2i3SVbXM5

Score
3/10

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      2.1MB

    • MD5

      3812f398accf02a3682c2f5e4e4bc3d2

    • SHA1

      7f676d846d454d7663fd8c3319757d6d1212b6d9

    • SHA256

      a72e10e75deeb0bd9eddba1573f066b942c1112e8c4751b616942358cf029a20

    • SHA512

      4103ebd998caed9ebcd9e73e554ac3c0bdc28e7cfb0b4e7db28ce9587f480418008edb9d0352ede6539260aaa816001d6e855b4b90880bc531aa94b5398b4ef0

    • SSDEEP

      24576:v9CjNPigvk2DYVWmuPDJq01sLv8g0urvHrG1kl/r2xC8gC1gPD7e7/8:vkEp2oDF8m2CIo7E

    Score
    1/10
    • Target

      arpaname.exe

    • Size

      40KB

    • MD5

      adc5d33efde794932ea162086e7b6678

    • SHA1

      24c909fa4bc3239b8453fff3ddd7adeae4a917e2

    • SHA256

      e6831c9b0142eef65d102003d97914beca7d68c4caef0f64f1330e217b014c1a

    • SHA512

      96b91242dbd03d45a85b8d7dc93207b9e6aa94702c1d13b8f7924da78a7e9d41ca131fedeba82a689b66230b9651145081c8e984e6b2d9d4f09559a55fd43142

    • SSDEEP

      384:0WsaAWdbuqBOziF9FmP7NVL6vxwUbM0lRYs6oP:0WsrChBOzK94hVmmUb0WP

    Score
    1/10
    • Target

      bindevt.dll

    • Size

      448KB

    • MD5

      956c4282a920fe5d2b7936d355d24da7

    • SHA1

      5e33f1d24fd2ab6a706186812e7cb50eb8559d73

    • SHA256

      8e2664f68351eb390c0bdfb51e6101af26314d078628ffcc1a12b403a2cc9183

    • SHA512

      13e51a93965a855223f6b778a4b43e4c0a78e321a1a2735b54e4c80139448ae967023ca05ac86b6660ef17f3c3acdd36af6f955dd33325dda5d8ce29d58d5a61

    • SSDEEP

      6144:gLyto9KMLecTR/bsUpbm97VQ8873FKBkDORsnb6ZYoN3dHiVXj:gLKo9PLecFTsU9m9E73FSRsnb6ntIj

    Score
    1/10
    • Target

      ddns-confgen.exe

    • Size

      48KB

    • MD5

      b4c3c3bffa51fe987675db3aee9d5d86

    • SHA1

      bcc0930bcde51f18274b69cecb5b20c0d20c8e28

    • SHA256

      25acac47bd3baadbb347facd00ba67ee8d257968b5562abc9bb8e1229d7f0b4f

    • SHA512

      723e4b0c496bc0b772cb90c5e2205e32fc38bf29398ba87392cd062905273b9391ca7fa8345569a67114c51219d260a3cf7ffd19895200dc433cfdffb7f1912a

    • SSDEEP

      384:n2Yr6oNUZ1DaAC/d/zdSR0Z0TDAd6vxwU5lPBodQdqtez5Qy6oP:n2YWoNUZMf/d/zgqcDAwmUDB2eq1wP

    Score
    1/10
    • Target

      delve.exe

    • Size

      76KB

    • MD5

      937e6bbcfde1259822975e4ecc5c5b27

    • SHA1

      3b94d322ad9829569caec8d480cc9b89a3b10988

    • SHA256

      4bf65c95c02eb4b8865952736abcb15af958ef8d80259098d9ea2eada520cae1

    • SHA512

      e69adb9a01a50bd3d9f20ab362d0b1955d1ac876fa63895137980c0f6295865ab1f3f562c798772d3bac643186825635f558190fdca9f0bf4eae7e260dd74ce2

    • SSDEEP

      768:JTjmu0jONOhOw4bQslYVEGqi8FgcBw8MazxmUVNEHmUzYhtrlCLkFwP:RmHjiaIjYVEGqfgcKamEEHmUzUq

    Score
    1/10
    • Target

      dig.exe

    • Size

      152KB

    • MD5

      7f0ff9ebf52090a06a77ddcdeba3ff77

    • SHA1

      d40242039efdef47ae05fbfe43578209767df441

    • SHA256

      915b63cd4ad28a2e00cda7cea375f7214b9ed6d8d8b8d09bc72fd27856e35403

    • SHA512

      034fb30063cfdfc240d39d9a525a1e2dc66e9069d76430adf9f3955639ae83eda9ab6e8b9d4af086bfd0d51af36ae589553c7441685efa0eb787ca2720d7e31f

    • SSDEEP

      3072:jNDcf6Ixyt+I9wtbqB2xbBqp9xhOmAmUsD6mT:j4x9MwtfqdhO3A

    Score
    1/10
    • Target

      dnssec-dsfromkey.exe

    • Size

      92KB

    • MD5

      17941e83f719e25db0ea807236b97a2f

    • SHA1

      0cf8cef823f13e4921217df118d74b217d4c0704

    • SHA256

      cf5aed4f19ce919dd9fe2bd7c2b39dc48b7818b357cbeb21bace1dac5322bce5

    • SHA512

      f11ee484bcff1ecc9eafa096ac11986fb3d2b92a360c5d3f80247efb18f55999eb17dcc093abd3a6298193542057babe27d8c8b1aee8701eb7562084993149ce

    • SSDEEP

      1536:nPwm8Ljc7RV8sxab7ViisYZbCuNOZLB/F2fV8Pv5FmUgtsp:nR2X7ViixZjNOZLBdQV835FmUgq

    Score
    1/10
    • Target

      dnssec-importkey.exe

    • Size

      92KB

    • MD5

      1a2cf9abe10115563dc3c7305dc1bf78

    • SHA1

      ddb6670d8546ea60a4621593b4eb44f7cd40a7ad

    • SHA256

      51cb18dcc981ba2321aea68c2538113bf9abd66dfd62ed87e88aefccb7df15bf

    • SHA512

      ad059ecb2f27da2e400bc58e1dbbc5c4b5747daddb0d5ff98d771778a14c4f6c78ebf37ec060d30eb9c263cbf71230fba7b2949d40b0f23f812845a166743ac7

    • SSDEEP

      1536:3YHbqIZ1N16tO1WMYZq/gdcQRqQWOZEY/D2vo35FmUQX8:yEYqZq/cckWOZrrwo35FmUQX

    Score
    1/10
    • Target

      dnssec-keyfromlabel.exe

    • Size

      96KB

    • MD5

      a0a224082c82906b78fa385ba225700f

    • SHA1

      9088d75c808ad3861026b72202e9d786c587acf0

    • SHA256

      08998878dab33b933bafabf6666d9da6d3192d1eb007103615c836541edb4f23

    • SHA512

      0a1b7aa45cd5c84d9d78ec5f336db4036b92ccc8182f7bd407bb361592e221da3d83b620aa76a5317e6b578fb61fa3bd8e647d988822b6d2ab9378fbe428e29e

    • SSDEEP

      1536:Hk7zYf75RDZYPz7bbMCBO6s/NOZW2WNJZ3KWgX/5imUeDS:HkYq7bbBOdNOZW2WNJZ3KWgX/5imUeD

    Score
    1/10
    • Target

      dnssec-keygen.exe

    • Size

      104KB

    • MD5

      fca0806d13c868800c54986e05cb08f7

    • SHA1

      0e23a8fe85ce35dd6963daf2ebc7dd3f024f5170

    • SHA256

      a94c50064819ed3e0531801a63435c9496f9e73a3f4344807b73e0d3becd8eaa

    • SHA512

      e6b75bb616ab344b6f0a6cb53853e1cce1d1374bf0f01ac47d6f36b2f94bad277679c3f783704367d4c9747e65758c2bb927a3f03201526e7647cf19203288eb

    • SSDEEP

      3072:ZMVutczvJRFgWRd4OZNqBDYJZ3KWgsXUr5imUR:CVuKvJ8lOZci

    Score
    1/10
    • Target

      dnssec-revoke.exe

    • Size

      84KB

    • MD5

      df8e0ccb45360df7a6796b323c2d0a1f

    • SHA1

      dfb70ba1dc68df6ffba25a8e2299723e9740ab00

    • SHA256

      59b660c0522ecf536a3ac203e5bb378ec4372da1bf697ebc75e6ac7961f0c0db

    • SHA512

      aacc7c38c118390b505c8bf8c56ba545776030536323e0023354ece54784da29a7c85e2ea0191d6a541215f9ca6ebdd314ff6bed927f10769974707a67c6425d

    • SSDEEP

      1536:IyrNobFCyvs4nlyoth4qStDDHMOZX0sdWI5CmUAu:I0SF/th4qS9DMOZX0sdh5CmUA

    Score
    1/10
    • Target

      dnssec-settime.exe

    • Size

      92KB

    • MD5

      e44951949234a15f2aedd5ee95fc68bf

    • SHA1

      d676b30f3eef3531382c86519169766b201315e8

    • SHA256

      0a339ce95ebb8c301f5b7060e19182f8ad620405be89e29ef7094e7d936e6fe6

    • SHA512

      99a7dd38480f0d7b0e1e5154582850d5317f54c218de4ed54c5425c65f87c14cb5dc483fe45ff8b501968a798881aa5698c399214dc1e4d5e6a7c32f91d16b4d

    • SSDEEP

      1536:uYhGwL9u7kcOJUgxGyDQBtG58OZR5bK05CmUfY:uzwLnxGyDQu58OZR5bK05CmUf

    Score
    1/10
    • Target

      dnssec-signzone.exe

    • Size

      160KB

    • MD5

      ea3437b7cf197ff4ca97210cf1fe4243

    • SHA1

      6dc742eee519b037d97e1fcfe58baf20c5a30bc2

    • SHA256

      d1a00b5f7e6cf4124fdd389d825c28de53b0e79b4a866ccf0deccc3cbe9fabeb

    • SHA512

      c06fc54da550889770d832403361af2281f092a84472a7a713cf779b899840af7514d58880346e0509090a242e3fe5c53276c25ce4e8de214af7b2aceb27e6ce

    • SSDEEP

      3072:9rdV6Mfn1OfP+Y17WIvyOZw+UIaBYIr+uQR59GUyVZjZ:0onlQ7fqOZlxpSZjZ

    Score
    1/10
    • Target

      dnssec-verify.exe

    • Size

      84KB

    • MD5

      1ddb4d5a6520aa107b3eb4f9a6bd1def

    • SHA1

      6a26ff433c187aa8788136e82d7880d25d3b4007

    • SHA256

      17937c342bb22671094445e930da7c5c14446b5a21974a567401fd2bd1a0ab10

    • SHA512

      b56d14a8f159d16e67a6d8618cc367f8f20e28e850feab5759cbf3d532eb6548704835fd6ce3d52f763b9d0b627e8a5aff29810ae0df8e0a68b38cf79682545f

    • SSDEEP

      1536:6kFi7kdl0YJJ8g4uTPJK5PgB/SAuOZitQIxVu59GUr7WGH:6n7kfJK5PgtluOZitfxc59GUriG

    Score
    1/10
    • Target

      genrandom.exe

    • Size

      40KB

    • MD5

      a4fae2063b2aad318f40ee723a5bfd75

    • SHA1

      856f361c7c21c7ace4e79c66e3a7f8eb86b3c401

    • SHA256

      2f23efa29d53e93cd760fb937cf5cd06e3b0edf4f40f82b83818ebe6f47389cc

    • SHA512

      2113254bca5bf5e077de51e53b8a8c5c5a4914430ecf11381600a48dd5bd2abb2e854ac503cbe549f39375c95e233a964c83fd320b492d57aa2c5eda9f5900dc

    • SSDEEP

      384:QSuHRskrQsU5Ho04zu75yenQbywApPxwUbgoKxeK6dP:Qj2Z5HofzG55nwApGU3nNP

    Score
    1/10
    • Target

      host.exe

    • Size

      128KB

    • MD5

      f18ce8bf486b16b10d216b00c3cff3cc

    • SHA1

      5e286554904550b06ec2970bd89ea3be1b848d9f

    • SHA256

      28378e7bfe30c772ec6bd2b2d0e05b64d24fede0e976c98be972ca592ee323aa

    • SHA512

      55d3b45c5d714aec52785ef4a5a3e7e5b3563497172cf704a58c0e80d28f3e2ad8bb59c20e7cb5accadae3ca93aee6f4ef639d3bae20e1e5a3f0240166ee21b5

    • SSDEEP

      1536:5kwapBKB4rjruXAZoWEIqtPveLzluUpqaDQ9xh+JkGU1z+Nt5j:2wIoCjaKEIqNveVuaDQ9xh+JkGU1wt

    Score
    1/10

MITRE ATT&CK Matrix

Tasks