Overview
overview
3Static
static
3BINDInstall.exe
windows7-x64
1BINDInstall.exe
windows10-2004-x64
1arpaname.exe
windows7-x64
arpaname.exe
windows10-2004-x64
bindevt.dll
windows7-x64
1bindevt.dll
windows10-2004-x64
1ddns-confgen.exe
windows7-x64
ddns-confgen.exe
windows10-2004-x64
delve.exe
windows7-x64
delve.exe
windows10-2004-x64
dig.exe
windows7-x64
dig.exe
windows10-2004-x64
dnssec-dsfromkey.exe
windows7-x64
dnssec-dsfromkey.exe
windows10-2004-x64
dnssec-importkey.exe
windows7-x64
dnssec-importkey.exe
windows10-2004-x64
dnssec-key...el.exe
windows7-x64
dnssec-key...el.exe
windows10-2004-x64
dnssec-keygen.exe
windows7-x64
dnssec-keygen.exe
windows10-2004-x64
dnssec-revoke.exe
windows7-x64
dnssec-revoke.exe
windows10-2004-x64
dnssec-settime.exe
windows7-x64
dnssec-settime.exe
windows10-2004-x64
dnssec-signzone.exe
windows7-x64
dnssec-signzone.exe
windows10-2004-x64
dnssec-verify.exe
windows7-x64
dnssec-verify.exe
windows10-2004-x64
genrandom.exe
windows7-x64
genrandom.exe
windows10-2004-x64
host.exe
windows7-x64
host.exe
windows10-2004-x64
General
-
Target
6072c9f33bf015ea33c747b9cb5e761746be0326f05848c93c51ecbcd226955d.zip.zip
-
Size
13.7MB
-
Sample
231107-rhjmcsge6z
-
MD5
781e8bb49a877057ded231187c396f1c
-
SHA1
eec3240fbf2bab6625460b08ab43fddd1ed2553f
-
SHA256
6720eedcf1c4f6b62bc8a47121a63edc9001d510a2aea5a8046dcc8f6d2b1acf
-
SHA512
2da572e0c5ecca143d3831b8c3b2efc04e56a5dc58c5eddd3578fbd530a9c6853bbce82dc57d91594c6ed2c030a7c87ede1ef63769979955057cd1af9f8d948d
-
SSDEEP
393216:envG0UmCYvEeEXdDL0iSKi19/IGSrJ4RQCMqy:WG0UmCYnEX2i3SVbXM5
Static task
static1
Behavioral task
behavioral1
Sample
BINDInstall.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
BINDInstall.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral3
Sample
arpaname.exe
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
arpaname.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral5
Sample
bindevt.dll
Resource
win7-20231020-en
Behavioral task
behavioral6
Sample
bindevt.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
ddns-confgen.exe
Resource
win7-20231023-en
Behavioral task
behavioral8
Sample
ddns-confgen.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral9
Sample
delve.exe
Resource
win7-20231020-en
Behavioral task
behavioral10
Sample
delve.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral11
Sample
dig.exe
Resource
win7-20231020-en
Behavioral task
behavioral12
Sample
dig.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral13
Sample
dnssec-dsfromkey.exe
Resource
win7-20231020-en
Behavioral task
behavioral14
Sample
dnssec-dsfromkey.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
dnssec-importkey.exe
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
dnssec-importkey.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral17
Sample
dnssec-keyfromlabel.exe
Resource
win7-20231020-en
Behavioral task
behavioral18
Sample
dnssec-keyfromlabel.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral19
Sample
dnssec-keygen.exe
Resource
win7-20231020-en
Behavioral task
behavioral20
Sample
dnssec-keygen.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral21
Sample
dnssec-revoke.exe
Resource
win7-20231020-en
Behavioral task
behavioral22
Sample
dnssec-revoke.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral23
Sample
dnssec-settime.exe
Resource
win7-20231025-en
Behavioral task
behavioral24
Sample
dnssec-settime.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral25
Sample
dnssec-signzone.exe
Resource
win7-20231025-en
Behavioral task
behavioral26
Sample
dnssec-signzone.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral27
Sample
dnssec-verify.exe
Resource
win7-20231020-en
Behavioral task
behavioral28
Sample
dnssec-verify.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral29
Sample
genrandom.exe
Resource
win7-20231020-en
Behavioral task
behavioral30
Sample
genrandom.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral31
Sample
host.exe
Resource
win7-20231023-en
Behavioral task
behavioral32
Sample
host.exe
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
BINDInstall.exe
-
Size
2.1MB
-
MD5
3812f398accf02a3682c2f5e4e4bc3d2
-
SHA1
7f676d846d454d7663fd8c3319757d6d1212b6d9
-
SHA256
a72e10e75deeb0bd9eddba1573f066b942c1112e8c4751b616942358cf029a20
-
SHA512
4103ebd998caed9ebcd9e73e554ac3c0bdc28e7cfb0b4e7db28ce9587f480418008edb9d0352ede6539260aaa816001d6e855b4b90880bc531aa94b5398b4ef0
-
SSDEEP
24576:v9CjNPigvk2DYVWmuPDJq01sLv8g0urvHrG1kl/r2xC8gC1gPD7e7/8:vkEp2oDF8m2CIo7E
Score1/10 -
-
-
Target
arpaname.exe
-
Size
40KB
-
MD5
adc5d33efde794932ea162086e7b6678
-
SHA1
24c909fa4bc3239b8453fff3ddd7adeae4a917e2
-
SHA256
e6831c9b0142eef65d102003d97914beca7d68c4caef0f64f1330e217b014c1a
-
SHA512
96b91242dbd03d45a85b8d7dc93207b9e6aa94702c1d13b8f7924da78a7e9d41ca131fedeba82a689b66230b9651145081c8e984e6b2d9d4f09559a55fd43142
-
SSDEEP
384:0WsaAWdbuqBOziF9FmP7NVL6vxwUbM0lRYs6oP:0WsrChBOzK94hVmmUb0WP
Score1/10 -
-
-
Target
bindevt.dll
-
Size
448KB
-
MD5
956c4282a920fe5d2b7936d355d24da7
-
SHA1
5e33f1d24fd2ab6a706186812e7cb50eb8559d73
-
SHA256
8e2664f68351eb390c0bdfb51e6101af26314d078628ffcc1a12b403a2cc9183
-
SHA512
13e51a93965a855223f6b778a4b43e4c0a78e321a1a2735b54e4c80139448ae967023ca05ac86b6660ef17f3c3acdd36af6f955dd33325dda5d8ce29d58d5a61
-
SSDEEP
6144:gLyto9KMLecTR/bsUpbm97VQ8873FKBkDORsnb6ZYoN3dHiVXj:gLKo9PLecFTsU9m9E73FSRsnb6ntIj
Score1/10 -
-
-
Target
ddns-confgen.exe
-
Size
48KB
-
MD5
b4c3c3bffa51fe987675db3aee9d5d86
-
SHA1
bcc0930bcde51f18274b69cecb5b20c0d20c8e28
-
SHA256
25acac47bd3baadbb347facd00ba67ee8d257968b5562abc9bb8e1229d7f0b4f
-
SHA512
723e4b0c496bc0b772cb90c5e2205e32fc38bf29398ba87392cd062905273b9391ca7fa8345569a67114c51219d260a3cf7ffd19895200dc433cfdffb7f1912a
-
SSDEEP
384:n2Yr6oNUZ1DaAC/d/zdSR0Z0TDAd6vxwU5lPBodQdqtez5Qy6oP:n2YWoNUZMf/d/zgqcDAwmUDB2eq1wP
Score1/10 -
-
-
Target
delve.exe
-
Size
76KB
-
MD5
937e6bbcfde1259822975e4ecc5c5b27
-
SHA1
3b94d322ad9829569caec8d480cc9b89a3b10988
-
SHA256
4bf65c95c02eb4b8865952736abcb15af958ef8d80259098d9ea2eada520cae1
-
SHA512
e69adb9a01a50bd3d9f20ab362d0b1955d1ac876fa63895137980c0f6295865ab1f3f562c798772d3bac643186825635f558190fdca9f0bf4eae7e260dd74ce2
-
SSDEEP
768:JTjmu0jONOhOw4bQslYVEGqi8FgcBw8MazxmUVNEHmUzYhtrlCLkFwP:RmHjiaIjYVEGqfgcKamEEHmUzUq
Score1/10 -
-
-
Target
dig.exe
-
Size
152KB
-
MD5
7f0ff9ebf52090a06a77ddcdeba3ff77
-
SHA1
d40242039efdef47ae05fbfe43578209767df441
-
SHA256
915b63cd4ad28a2e00cda7cea375f7214b9ed6d8d8b8d09bc72fd27856e35403
-
SHA512
034fb30063cfdfc240d39d9a525a1e2dc66e9069d76430adf9f3955639ae83eda9ab6e8b9d4af086bfd0d51af36ae589553c7441685efa0eb787ca2720d7e31f
-
SSDEEP
3072:jNDcf6Ixyt+I9wtbqB2xbBqp9xhOmAmUsD6mT:j4x9MwtfqdhO3A
Score1/10 -
-
-
Target
dnssec-dsfromkey.exe
-
Size
92KB
-
MD5
17941e83f719e25db0ea807236b97a2f
-
SHA1
0cf8cef823f13e4921217df118d74b217d4c0704
-
SHA256
cf5aed4f19ce919dd9fe2bd7c2b39dc48b7818b357cbeb21bace1dac5322bce5
-
SHA512
f11ee484bcff1ecc9eafa096ac11986fb3d2b92a360c5d3f80247efb18f55999eb17dcc093abd3a6298193542057babe27d8c8b1aee8701eb7562084993149ce
-
SSDEEP
1536:nPwm8Ljc7RV8sxab7ViisYZbCuNOZLB/F2fV8Pv5FmUgtsp:nR2X7ViixZjNOZLBdQV835FmUgq
Score1/10 -
-
-
Target
dnssec-importkey.exe
-
Size
92KB
-
MD5
1a2cf9abe10115563dc3c7305dc1bf78
-
SHA1
ddb6670d8546ea60a4621593b4eb44f7cd40a7ad
-
SHA256
51cb18dcc981ba2321aea68c2538113bf9abd66dfd62ed87e88aefccb7df15bf
-
SHA512
ad059ecb2f27da2e400bc58e1dbbc5c4b5747daddb0d5ff98d771778a14c4f6c78ebf37ec060d30eb9c263cbf71230fba7b2949d40b0f23f812845a166743ac7
-
SSDEEP
1536:3YHbqIZ1N16tO1WMYZq/gdcQRqQWOZEY/D2vo35FmUQX8:yEYqZq/cckWOZrrwo35FmUQX
Score1/10 -
-
-
Target
dnssec-keyfromlabel.exe
-
Size
96KB
-
MD5
a0a224082c82906b78fa385ba225700f
-
SHA1
9088d75c808ad3861026b72202e9d786c587acf0
-
SHA256
08998878dab33b933bafabf6666d9da6d3192d1eb007103615c836541edb4f23
-
SHA512
0a1b7aa45cd5c84d9d78ec5f336db4036b92ccc8182f7bd407bb361592e221da3d83b620aa76a5317e6b578fb61fa3bd8e647d988822b6d2ab9378fbe428e29e
-
SSDEEP
1536:Hk7zYf75RDZYPz7bbMCBO6s/NOZW2WNJZ3KWgX/5imUeDS:HkYq7bbBOdNOZW2WNJZ3KWgX/5imUeD
Score1/10 -
-
-
Target
dnssec-keygen.exe
-
Size
104KB
-
MD5
fca0806d13c868800c54986e05cb08f7
-
SHA1
0e23a8fe85ce35dd6963daf2ebc7dd3f024f5170
-
SHA256
a94c50064819ed3e0531801a63435c9496f9e73a3f4344807b73e0d3becd8eaa
-
SHA512
e6b75bb616ab344b6f0a6cb53853e1cce1d1374bf0f01ac47d6f36b2f94bad277679c3f783704367d4c9747e65758c2bb927a3f03201526e7647cf19203288eb
-
SSDEEP
3072:ZMVutczvJRFgWRd4OZNqBDYJZ3KWgsXUr5imUR:CVuKvJ8lOZci
Score1/10 -
-
-
Target
dnssec-revoke.exe
-
Size
84KB
-
MD5
df8e0ccb45360df7a6796b323c2d0a1f
-
SHA1
dfb70ba1dc68df6ffba25a8e2299723e9740ab00
-
SHA256
59b660c0522ecf536a3ac203e5bb378ec4372da1bf697ebc75e6ac7961f0c0db
-
SHA512
aacc7c38c118390b505c8bf8c56ba545776030536323e0023354ece54784da29a7c85e2ea0191d6a541215f9ca6ebdd314ff6bed927f10769974707a67c6425d
-
SSDEEP
1536:IyrNobFCyvs4nlyoth4qStDDHMOZX0sdWI5CmUAu:I0SF/th4qS9DMOZX0sdh5CmUA
Score1/10 -
-
-
Target
dnssec-settime.exe
-
Size
92KB
-
MD5
e44951949234a15f2aedd5ee95fc68bf
-
SHA1
d676b30f3eef3531382c86519169766b201315e8
-
SHA256
0a339ce95ebb8c301f5b7060e19182f8ad620405be89e29ef7094e7d936e6fe6
-
SHA512
99a7dd38480f0d7b0e1e5154582850d5317f54c218de4ed54c5425c65f87c14cb5dc483fe45ff8b501968a798881aa5698c399214dc1e4d5e6a7c32f91d16b4d
-
SSDEEP
1536:uYhGwL9u7kcOJUgxGyDQBtG58OZR5bK05CmUfY:uzwLnxGyDQu58OZR5bK05CmUf
Score1/10 -
-
-
Target
dnssec-signzone.exe
-
Size
160KB
-
MD5
ea3437b7cf197ff4ca97210cf1fe4243
-
SHA1
6dc742eee519b037d97e1fcfe58baf20c5a30bc2
-
SHA256
d1a00b5f7e6cf4124fdd389d825c28de53b0e79b4a866ccf0deccc3cbe9fabeb
-
SHA512
c06fc54da550889770d832403361af2281f092a84472a7a713cf779b899840af7514d58880346e0509090a242e3fe5c53276c25ce4e8de214af7b2aceb27e6ce
-
SSDEEP
3072:9rdV6Mfn1OfP+Y17WIvyOZw+UIaBYIr+uQR59GUyVZjZ:0onlQ7fqOZlxpSZjZ
Score1/10 -
-
-
Target
dnssec-verify.exe
-
Size
84KB
-
MD5
1ddb4d5a6520aa107b3eb4f9a6bd1def
-
SHA1
6a26ff433c187aa8788136e82d7880d25d3b4007
-
SHA256
17937c342bb22671094445e930da7c5c14446b5a21974a567401fd2bd1a0ab10
-
SHA512
b56d14a8f159d16e67a6d8618cc367f8f20e28e850feab5759cbf3d532eb6548704835fd6ce3d52f763b9d0b627e8a5aff29810ae0df8e0a68b38cf79682545f
-
SSDEEP
1536:6kFi7kdl0YJJ8g4uTPJK5PgB/SAuOZitQIxVu59GUr7WGH:6n7kfJK5PgtluOZitfxc59GUriG
Score1/10 -
-
-
Target
genrandom.exe
-
Size
40KB
-
MD5
a4fae2063b2aad318f40ee723a5bfd75
-
SHA1
856f361c7c21c7ace4e79c66e3a7f8eb86b3c401
-
SHA256
2f23efa29d53e93cd760fb937cf5cd06e3b0edf4f40f82b83818ebe6f47389cc
-
SHA512
2113254bca5bf5e077de51e53b8a8c5c5a4914430ecf11381600a48dd5bd2abb2e854ac503cbe549f39375c95e233a964c83fd320b492d57aa2c5eda9f5900dc
-
SSDEEP
384:QSuHRskrQsU5Ho04zu75yenQbywApPxwUbgoKxeK6dP:Qj2Z5HofzG55nwApGU3nNP
Score1/10 -
-
-
Target
host.exe
-
Size
128KB
-
MD5
f18ce8bf486b16b10d216b00c3cff3cc
-
SHA1
5e286554904550b06ec2970bd89ea3be1b848d9f
-
SHA256
28378e7bfe30c772ec6bd2b2d0e05b64d24fede0e976c98be972ca592ee323aa
-
SHA512
55d3b45c5d714aec52785ef4a5a3e7e5b3563497172cf704a58c0e80d28f3e2ad8bb59c20e7cb5accadae3ca93aee6f4ef639d3bae20e1e5a3f0240166ee21b5
-
SSDEEP
1536:5kwapBKB4rjruXAZoWEIqtPveLzluUpqaDQ9xh+JkGU1z+Nt5j:2wIoCjaKEIqNveVuaDQ9xh+JkGU1wt
Score1/10 -