Overview

overview

4

Static

static

4

BINDInstall.exe

windows7-x64

1

BINDInstall.exe

windows10-2004-x64

1

Bv9ARM.ch01.html

windows7-x64

1

Bv9ARM.ch01.html

windows10-2004-x64

1

Bv9ARM.ch02.html

windows7-x64

1

Bv9ARM.ch02.html

windows10-2004-x64

1

Bv9ARM.ch03.html

windows7-x64

1

Bv9ARM.ch03.html

windows10-2004-x64

1

Bv9ARM.ch04.html

windows7-x64

1

Bv9ARM.ch04.html

windows10-2004-x64

1

Bv9ARM.ch05.html

windows7-x64

1

Bv9ARM.ch05.html

windows10-2004-x64

1

Bv9ARM.ch06.html

windows7-x64

1

Bv9ARM.ch06.html

windows10-2004-x64

1

Bv9ARM.ch07.html

windows7-x64

1

Bv9ARM.ch07.html

windows10-2004-x64

1

Bv9ARM.ch08.html

windows7-x64

1

Bv9ARM.ch08.html

windows10-2004-x64

1

Bv9ARM.ch09.html

windows7-x64

1

Bv9ARM.ch09.html

windows10-2004-x64

1

Bv9ARM.ch10.html

windows7-x64

1

Bv9ARM.ch10.html

windows10-2004-x64

1

Bv9ARM.html

windows7-x64

1

Bv9ARM.html

windows10-2004-x64

1

Bv9ARM.pdf

windows7-x64

1

Bv9ARM.pdf

windows10-2004-x64

1

README.vbs

windows7-x64

1

README.vbs

windows10-2004-x64

1

bindevt.dll

windows7-x64

1

bindevt.dll

windows10-2004-x64

1

dig.exe

windows7-x64

1

dig.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97e715eb00fa5388cd69c2da091bb89997b2da2837e63e19f585b229dc356aa1.zip.zip

  • Size

    4.8MB

  • Sample

    231107-rmtccsgh7w

  • MD5

    0e116a8a7cee392de4a46441bb29600f

  • SHA1

    aedfe2c69ecdf4091d933f2a04eb78355b952273

  • SHA256

    95d21eb9300d3057793b90d34f8ba0f6c1130ff1372cba12b28776ce4ba6090a

  • SHA512

    eb01e291c476f408ec1017edf6229091c630e662402f0d382d32d4af5346681f415f475071489c8845d89caa9ce11f4e74caccff3b26a21aaf9d05659c217763

  • SSDEEP

    98304:DZpx9OjwS8UCZtteIdHvrx55p3oiciZ+MSokhTXBW2HA4HK:DZpx9XS8RZtt1vrxFJoMihzoKzK

Score
4/10
linkpdf

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      240KB

    • MD5

      b97564e62cad4db867198e5e6245ac3e

    • SHA1

      0d9a34354c8a48d15e5e07331191d87bd0ea6491

    • SHA256

      401c325d0f511f5672759ad2ecc3eca54c3752183962a88e4d29d81c7f89c399

    • SHA512

      b08184860e9a650369631022566a92b63ef46c575ff2699b36b4f3082d1fba2b07876a048a275f9ea9fdb00f89c0a41d97f9b5ebe6c4702b4fb4f019a16f6bfa

    • SSDEEP

      3072:q0V3+jFOtCMnBmEIRYCLRWHw1aOq+URXqISnLBuHhMP79tflV+QJstWoxjET/P:/gFAlBmEIRYcRKw1rQaISnLR7Bg/xY

    Score
    1/10
    behavioral1behavioral2

    • Target

      Bv9ARM.ch01.html

    • Size

      24KB

    • MD5

      8faf2b4fbfa4d441500118888de32a7d

    • SHA1

      27906d2045595b42dc677fab2c4d3e219d44963b

    • SHA256

      bd8728733a29aa4d4e5c4b990b5f9d5810b18fc259a68d33d071845cae3150d0

    • SHA512

      3764fee377a9426fb3b2ecda061d0a02c429f31d6ed191e03a9fbaf43241a5e41dfc33fc85e36e943139e23a0c4e72ff3f7e4363de3cfbd4bbc2cb3598cfc20a

    • SSDEEP

      384:WvO2BFYNHvWYbbGlzO2fvgkOZXnl+9B86gBGpu8W:AO3+0GvAZX49BWQwJ

    Score
    1/10
    behavioral3behavioral4

    • Target

      Bv9ARM.ch02.html

    • Size

      7KB

    • MD5

      291d574640c38ca745dfd28a256b68e7

    • SHA1

      ba3c924c22f79b4df4c7db361f29c1e0bf3583c9

    • SHA256

      cebb283ca667a7783f7fb3e59fcb2e2f724a4f2cb6c800bafb18a6e4c82d31a1

    • SHA512

      854913cdbbf947b9fc7e94ac61d0a5e21ad6ba32f5f3cf1e13b5eae555080c4cc047af73d43d525d279456d325109f6f13a777f7985f3a050b746bcd53b1d509

    • SSDEEP

      192:WvOHgQlNSgqkDqjKYOOmmGDdrvvI16zGU2Ujl/EbzTR7nVdFzuFm0:WvOAAYjxaLxG6QxnkJ

    Score
    1/10
    behavioral5behavioral6

    • Target

      Bv9ARM.ch03.html

    • Size

      37KB

    • MD5

      72a57b8ee5bf9b708b8056b1aabce8a0

    • SHA1

      e3d520cac6d7c7b631c7b62e7f1e3a3f12d6a2dd

    • SHA256

      3f0cb77bbbf0d114d9043b6e077d6fe5fe7163bf762ca928c5f8a0bd54bfb465

    • SHA512

      24deb209766f2fb96665127282da23d13a86d0520824d4fbdb2a1d0a159557726b0e6d3aea1323ffecb6ba6640ab0c0887369debd3c6594a67ae64d2475646e6

    • SSDEEP

      384:WvO5rdYSM/tNz9xvIbdjSO7vzpkjLTq7af8GeGDg7FIRwkq/hWYGMkhERr4qzo:AOgtTxQbdjxvijhf8GemgL1hRr4r

    Score
    1/10
    behavioral7behavioral8

    • Target

      Bv9ARM.ch04.html

    • Size

      47KB

    • MD5

      a0348f5a5521388edd3a0335c24db3c2

    • SHA1

      b8ab6b855d737674df3ddfcf3ca2d37a9ffeb6ef

    • SHA256

      cff741358cba089bb06786ec6eb4c7f661894344eac2fe336cf165a9e441ec20

    • SHA512

      2b9bacae2e288f52c307290a7146593c7feaab81069d4b9feca4cb25eca0842a8829deec3419af755a4243320e4c4cbf08f7b9259d5878c863b7165cd81ff911

    • SSDEEP

      384:WvO+m3YRa0IFjo1Ujer7QShtEE6PIT/k20h28eAqlgiA5Ewt4fKkLBIFK3pinjEj:AOqT1UStn6k/SZikVY8nwcxHmmm

    Score
    1/10
    behavioral10behavioral9

    • Target

      Bv9ARM.ch05.html

    • Size

      6KB

    • MD5

      6a59b0c4a65d865e705da84bdc476a89

    • SHA1

      34df5ffeb2843338904342d337414fdcba2e3c8d

    • SHA256

      ada3b4885c708f2656788c7d0c18988fd542cef37274ab003292b8f75b12022e

    • SHA512

      89e1974ffb1d2f3baf4e617e5524cfcd7558199a6f22a8492dafce79ce9411a8c97158bede01dc905074d54b90beef0cfcbbf263fe84cbd4c87547b0e0ff043d

    • SSDEEP

      192:WvOHGa4cNSpnfi4SkKZHlyK6Qar08+jg4gY0:WvOmavYkE4H8Qi4C

    Score
    1/10
    behavioral11behavioral12

    • Target

      Bv9ARM.ch06.html

    • Size

      405KB

    • MD5

      ccab67422fa1c63b33405d2cbab66a87

    • SHA1

      2bae6a284da2c314fab228ed45c6b9ab5dd18abb

    • SHA256

      8e62fa559b130499d878cbbdea3db76a047bcb1429bc5f12ef1a65efff925997

    • SHA512

      bf50e49dc1f385ea38c6033afa19aa24354b1e7ae7725cc26a6d282a841b535001b851bd7e31fc32b8278fa1e66e3e5a40f533a2cb87efa9ab27c45f948e0bdb

    • SSDEEP

      3072:Am3Pj3s5NaFn2FIrM3HWMWS1SMMWSW13hQVe9VGCyi5RPHNk:Amw6nf8SKVG+5RPtk

    Score
    1/10
    behavioral13behavioral14

    • Target

      Bv9ARM.ch07.html

    • Size

      12KB

    • MD5

      35181bd2f8576466cea54c3a3a526bb8

    • SHA1

      0c38655d9a75ef2ea8b1a8c220a1836d1a2f1cb5

    • SHA256

      d2b85e24d6b693a0911275dc0ebeafc3126860f1e5ff591a59cc954ab6a83c81

    • SHA512

      1c3d8eb348d42356be9a7e11306be76a4ba1beac4d6f778d62625655e7417f931e8733cd1eec9892a74450635744801d3d5a201a0380c84ee2e2469092ca545c

    • SSDEEP

      192:WvOHU1FNSMuoTzMbO3tsrrrOci9h6By0rK9hN0PkmP+YCBF0:WvO0rYOZtsr3q7bOPqm

    Score
    1/10
    behavioral15behavioral16

    • Target

      Bv9ARM.ch08.html

    • Size

      6KB

    • MD5

      555e6abe2d76f48f66bb73ea9184480b

    • SHA1

      bf01c40e438b0d5529d2aae3629ddffd659259d0

    • SHA256

      fb35209ee67e8ee06a510bcc08ed1cb1c86c7fb6c8e8ad98e7a3b62dede54815

    • SHA512

      c875d05d53a7f4fcd6f7ae955ae39bc544293229ff0d68121b952ccf1b5414f0ca9a366dcc309373330bf7f37b4d8e335ba7af5ebc9120d28c80bb9ca99aa0d8

    • SSDEEP

      96:dAvOHe5ao4P0VVoIJNaLga+AK3fmeeXH5PmX6eveBteRg3NedL3n2AeIgonFPmnE:WvOHFoDJNSigfDNqXFmyGivN80

    Score
    1/10
    behavioral17behavioral18

    • Target

      Bv9ARM.ch09.html

    • Size

      49KB

    • MD5

      783829bd0308a67709601d47d5901805

    • SHA1

      ce373973520add4c37c9d18ebb205e20a15ed37f

    • SHA256

      129bcda83ed35a7a8537c4f8bf74c6e9e0f704c14937d6c03fa148027e24f275

    • SHA512

      71019ee8a133208f1a10e2d71afa008aa3f485ae0285d2b23af66422aec66d42b88ea9f7506f361a18379fca236ced72bae8b7f94fa005e0e83045a793166194

    • SSDEEP

      384:WvORaYts+x4U3CK1siN8I35lKDuQjmF2JaiDT4HH89szMOGEkZLIK9g5Wy6NBvKi:AOgTUH6I3mDzJ8KsMYTKi0mg

    Score
    1/10
    behavioral19behavioral20

    • Target

      Bv9ARM.ch10.html

    • Size

      4KB

    • MD5

      3d2a383253006ba70bb5f4e8b071925b

    • SHA1

      e38544cb71ad6f743dac1b6d2039faed39ed0ae9

    • SHA256

      9800f1ee05117f37ac97dccff808f50e491de066380bae7686b6cef72ab980f1

    • SHA512

      7eb1c7dd102f224869e980a0eb7633ee67e9718067946c4dcc062fddf3972aab7652a1c5bd24961980b890ade4f970dd7491fb59993351894356a4ee4892e92b

    • SSDEEP

      96:dAvOHe5BE50VV2yNaLgAAKyfdytKQJ21JUC/bV+qmWzNawAiaTvilgBfHU:WvOHkHOyNS28tB21fD5Ty0

    Score
    1/10
    behavioral21behavioral22

    • Target

      Bv9ARM.html

    • Size

      18KB

    • MD5

      a2fde422dd709b17ba40932498ce4fb5

    • SHA1

      c5ebd92fbdecb1838c851ef228bc914bcb92a1c3

    • SHA256

      fce41c36c36124bde08c920dcff83130763519406470dc1a20afff61e794b3f3

    • SHA512

      b843fea62008ead9ed9b8ceeeebde48d07ea31d28a630678d7e637198b2b38b4d5765ff908d8064a57af96e79a337e730b57982a9cbf09d1607d2d3bf06f4c89

    • SSDEEP

      192:WvOHmepNSpK3TMIpBvUjgYOrihj8QkeyR813dMPNSBybB21fD9z0:WvOG0YwDMIHvONkeKmBDS

    Score
    1/10
    behavioral23behavioral24

    • Target

      Bv9ARM.pdf

    • Size

      744KB

    • MD5

      5da96964e6c1793f026f9760d297c36a

    • SHA1

      4f490c7a7a33dab26fa476c5a73aa87f9941c1b2

    • SHA256

      2af604ebbe0665a9f13972fdb47a0e370a703a5ef15c4d086b002827c70bb937

    • SHA512

      360a76a795bb4c76884aa11868d12e60c8ecfd3a4d033a933b49e1ae6c948654b7a92c809ecc0393654eef0e228c7041e50deac6c9a2085009ac259d2fd139c8

    • SSDEEP

      12288:tHaQObaSvlpBWjHXkZIwFq1UXYs+y9A3fNKSwv08Et+KvXMDrCQreRXM4c:t6deE3WTXlkq1V28VK28zrWZc

    Score
    1/10
    behavioral25behavioral26

    • Target

      README

    • Size

      18KB

    • MD5

      f6bdddc536554429da88e2bf53f809fd

    • SHA1

      b7fa41d034600d0fc126979fecf78b988be1cbcf

    • SHA256

      4e1d45a3ffa1b3d21ea891376adac3ceab0cc741c384fa024d4e6ad5ef7f56f6

    • SHA512

      89dcd30b9215d0d21431627fd8c9dc30439cffbc5060e5bc87e10553cfa86bd4703518d17600bd315f0fff977e871ba3010862b7ec12aea66d240f82a954ff46

    • SSDEEP

      384:lS+dLjb/OXX6S4ac4MgWCIf7hE38wN88WuTIxsn1s:lS+Bjb/sXuEWnhG8e88WuUxsn1s

    Score
    1/10
    behavioral27behavioral28

    • Target

      bindevt.dll

    • Size

      52KB

    • MD5

      363362027a97454bf8f2ed793aed185b

    • SHA1

      b4db5c0ecbdc62555fbac56b728adbafb1a39abe

    • SHA256

      e5b48394a1cc499b4f3ce96797f9fb6400e0d802ac2e97c97ae6d41e360f1bc1

    • SHA512

      01b99140d39a26a2de47829f970a69a526817e1c9bbb279d09dcecdb675e1cb395543a5b92061d4028f89bfd8627680c091a1adc35a4aeebc026fd00971f8c42

    • SSDEEP

      384:pk9TQsp/0zj3OAPV78tt7l3d0TTwMsKm6jRQnX6MojQWSRkLc0RaPV+8r277eubs:peTQsio0Zmj3WSRewPVpui/dVtDe

    Score
    1/10
    behavioral29behavioral30

    • Target

      dig.exe

    • Size

      72KB

    • MD5

      749de33cb17b245fbe5fccd202ad0688

    • SHA1

      bd50b6a84896bf68243e48a492e6df885553c8c5

    • SHA256

      23e7bc0cf5deda74dd537569506b2d1dd33b3a138b0e5fc3cfb47423a74e77f0

    • SHA512

      45376864fa7708d7f4f1e74609fdb1ba108b25fc0d0edec69cc4c3d0a41ef55b350edf3b52b20bf5d424c9a7d72fb6b5332f13f13f302502806798e634236ff8

    • SSDEEP

      1536:3eVslF0wnVgrZPPi3eW0ZCQfComufuwgEWGxI:uVdwnmrZN/Qod/gEWGy

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks