Overview

overview

4

Static

static

4

BINDInstall.exe

windows7-x64

1

BINDInstall.exe

windows10-2004-x64

1

Bv9ARM.ch01.html

windows7-x64

1

Bv9ARM.ch01.html

windows10-2004-x64

1

Bv9ARM.ch02.html

windows7-x64

1

Bv9ARM.ch02.html

windows10-2004-x64

1

Bv9ARM.ch03.html

windows7-x64

1

Bv9ARM.ch03.html

windows10-2004-x64

1

Bv9ARM.ch04.html

windows7-x64

1

Bv9ARM.ch04.html

windows10-2004-x64

1

Bv9ARM.ch05.html

windows7-x64

1

Bv9ARM.ch05.html

windows10-2004-x64

1

Bv9ARM.ch06.html

windows7-x64

1

Bv9ARM.ch06.html

windows10-2004-x64

1

Bv9ARM.ch07.html

windows7-x64

1

Bv9ARM.ch07.html

windows10-2004-x64

1

Bv9ARM.ch08.html

windows7-x64

1

Bv9ARM.ch08.html

windows10-2004-x64

1

Bv9ARM.ch09.html

windows7-x64

1

Bv9ARM.ch09.html

windows10-2004-x64

1

Bv9ARM.ch10.html

windows7-x64

1

Bv9ARM.ch10.html

windows10-2004-x64

1

Bv9ARM.html

windows7-x64

1

Bv9ARM.html

windows10-2004-x64

1

Bv9ARM.pdf

windows7-x64

1

Bv9ARM.pdf

windows10-2004-x64

1

CHANGES.ps1

windows7-x64

1

CHANGES.ps1

windows10-2004-x64

1

HISTORY.vbs

windows7-x64

1

HISTORY.vbs

windows10-2004-x64

1

arpaname.exe

windows7-x64

arpaname.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    cc1bd92a57caafd145ff052f72fd38a8f26511cb8d18d416a97a2ee86a896f0d.zip.zip

  • Size

    6.6MB

  • Sample

    231107-rn9ezaha8w

  • MD5

    5b1fc55da977372aa7be0ff415d9295c

  • SHA1

    1a6c252ec4aec8e883187560d47ee3c4997cc2c3

  • SHA256

    ef337a9c83ce891b6b76da0109a1bd540de4c459f1feb5c8409bd114469a22ef

  • SHA512

    ce1a824f8aa3fe1afaefdca077c5b0b4d0f471524741f17cf40ebc83da518dc8a4f11eae50fc450d06fe92b6be7eb44d675b92a80ea2a730a98f9fe20102bcd2

  • SSDEEP

    196608:ppv4FUsd+VX64/1XOOq+OrhVb1Rp/iYIL1Y:ppv4FZRG1X/TOrhBoYy1Y

Score
4/10
linkpdf

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      240KB

    • MD5

      0f32bbc54a1998a62b0fd2e57c52717f

    • SHA1

      78ba7441dfad61c8fac7f99282fca79fe4e02d20

    • SHA256

      9219a6e61adfd16aa3a457eb5981c118ce0572704b5823507598e173c812b847

    • SHA512

      9410b985f29e1af7b770786fb86c4a2c260c7137a54fdf746ea2c3a6e6910a85053c206350939448aa81626598245310af15244269b46b6726e0e5c5abe01544

    • SSDEEP

      3072:OmnhmIKxJMKIqMOjMnOgIX4sjvswCuydl0EiH8JGo0Mr++PDwLrJMtWoqOETlG:DnhhtjqMOjMeX3jvzi2Ei+rdbfqM

    Score
    1/10
    behavioral1behavioral2

    • Target

      Bv9ARM.ch01.html

    • Size

      24KB

    • MD5

      c402bc2de0527ac9253724c2beecbaf0

    • SHA1

      6a4eeb7670cf7b0da17fce2ff6c7e77871f6abfa

    • SHA256

      3db14049b439aee805d3ae51f855b92c2b122eb12205cd6d22ea04f7becc53e2

    • SHA512

      0b6a44bf07fdc99fcf23201bdfbb4afac31b5feb78e33d898756d1c2db3f26664af275105aeecfccc7c7ca9714086486759f953c60c2cf49d42685161f79f71e

    • SSDEEP

      384:OyvOXFYNqtTYbjYLz0qh4XOZakl+l186gWGpB8W:O0O7p2YtZanl1WPjJ

    Score
    1/10
    behavioral3behavioral4

    • Target

      Bv9ARM.ch02.html

    • Size

      7KB

    • MD5

      2600858538c76a8deb3c6d2ba4d481d2

    • SHA1

      074871d2ac69661bbcaa831f267642fbdb6f0429

    • SHA256

      51833765e5c6da041870a796d864faf12f0312b90a6a0e374e31b61e082ac904

    • SHA512

      7d148939c07054ad8e80a81431fc59267c17068dfc703bca7c3c69454e93da2dc2b34b8094149f759a68bdfe9434385ca663b812c0309d02aa0922824f332899

    • SSDEEP

      192:OyvOHJQlNSgqkDqjvGjmmGDdrvvI16rU2U5l/EXzTRlnV3IuFm0:OyvOpAYjRLdAoT5J

    Score
    1/10
    behavioral5behavioral6

    • Target

      Bv9ARM.ch03.html

    • Size

      28KB

    • MD5

      348c7346e3480de236f9b40a24b4032c

    • SHA1

      20f99e0c89994deb989255ca21a3699d7050f4a7

    • SHA256

      61a7c9934113fada1780784069198f61ed0c98dbb2cbfaf1532f2799b8381c83

    • SHA512

      4469408bf5772bf70a16046d6fb97e2e841385a912a986d64c439f4ae54d6db4996cd0e34c68ef1dabb143e1b32b3ca7006d68c9af7709a26d7f915f51c37a3f

    • SSDEEP

      384:OyvOtdYSD/tRfooxmIbdjSO7vzpkjLTq7afdbYG7ReERCqQo:O0OHtnxVbdjxvijhfdvRCE

    Score
    1/10
    behavioral7behavioral8

    • Target

      Bv9ARM.ch04.html

    • Size

      107KB

    • MD5

      b047c1bc13a4f7674af548bf9d821f59

    • SHA1

      5519ea9366ed43ae39cd44279a5836aba1ec525d

    • SHA256

      0cb5ddc284fdefe57b26d16cf05b75b4e3107b7441fd53dc906c71bc6848a3c3

    • SHA512

      3a030b572037ae33dceb02f1f0785324c7c96212258cd1b9eec1fbf388951da73d6d338ea0e639d87d2fb0ed0647fec6305166748837eb5cc27ad9283f6353df

    • SSDEEP

      1536:O0OhnxWC6wkRoLJHxvDneIUWZVWTbWGMIrV:O0gxWC6WbeeZATCGzrV

    Score
    1/10
    behavioral10behavioral9

    • Target

      Bv9ARM.ch05.html

    • Size

      6KB

    • MD5

      e1665ea27549b74b83cd1cf98179890e

    • SHA1

      cda5acb5d8775dd2e7698b1f6ca7a6dc4e782928

    • SHA256

      780559eee1c9bd87f65b5b9f580aca3a388120c2ba0c37c59f64ab60d184d232

    • SHA512

      1e7456f909749a7ad9956d8a5a746cd735ebc95ac31f171981b703fb185f8d3b8ddea8d131c27dfeb5506c482794ab6f48b4d4171dcfeedbcdc7b38117d43621

    • SSDEEP

      192:OyvOHU4cNSpnfiESkKZHlyK6Qar08+jg4gY0:OyvO0vYkY4H8Qi4C

    Score
    1/10
    behavioral11behavioral12

    • Target

      Bv9ARM.ch06.html

    • Size

      588KB

    • MD5

      4cadb7cfd9def9aad0ae22b8458c7ea8

    • SHA1

      b726e90225ac5f7ce0fb85afe662b9cc45a3109f

    • SHA256

      45f2be814d2614aa8a0594a212197d875a412e973339019ce13e2df9c5bb8d9f

    • SHA512

      3cb310063751ae1b22a5b882117e445d0fc267b88005c7dfff2202d05e8548e036a1cbf48529857039ceafd0cebeb0194b9ed481a9388f85118b7f1539860b5c

    • SSDEEP

      3072:O0e4D2xC3LnPEVFAOSjWUSMAfNjlqyS8/jmVUiFmSS6UhVZwVI4cUVGCmt5RPBM3:O0e2rPEYOSH81iMSSyVGN5RPSx

    Score
    1/10
    behavioral13behavioral14

    • Target

      Bv9ARM.ch07.html

    • Size

      11KB

    • MD5

      1799388db6efff9afdc05142653c7af9

    • SHA1

      c8afaca4e956dc796369c159286f3b0bf65e6e34

    • SHA256

      c8ea0abfbd4e7b6ab97049717a8f4149fb805859267d20beec84d7f018511aee

    • SHA512

      ad607de6bb41779929f3e924b2e8a5c0894fd1d95aba4acd2d98bbafb624edb2b1b1891dcbc72f30e0b875eea427ce543e43309ba9691a7abb500fed2affce71

    • SSDEEP

      192:OyvOHk1FNSMuoTzVbOTtsorC4k9h6B3larK9hn0PkmP+YCBF0:OyvOErYO4tsoYU1OPqm

    Score
    1/10
    behavioral15behavioral16

    • Target

      Bv9ARM.ch08.html

    • Size

      6KB

    • MD5

      e2d4c4558f3b89c52a6fc8eb13c88eb1

    • SHA1

      2281732535b80fe88047cb59a1d74a97acbc7e3b

    • SHA256

      37bc9b5ccc5f1a28c38370b3677630c9ca5741f39e61fbb52a138d9407b48835

    • SHA512

      83e09c26938f5d01b19fff95616da5905c9681ccba0e96099808e6b55ef7c9bd220ff52c9429a7e199e2474a057bd6615b0001db71868519a50bcc5ce92201cf

    • SSDEEP

      96:OBAvOHe5T4P0VVoIJNaLga+AK3fmeeX6zq16eueLterm3NedL3n2Ae2gonFPmnFG:OyvOHmDJNSig/XNEXFmyGivN80

    Score
    1/10
    behavioral17behavioral18

    • Target

      Bv9ARM.ch09.html

    • Size

      67KB

    • MD5

      01617b6f19d6a3f3d964d9c27fd9fa58

    • SHA1

      3b26f2f463a178ce4fff30ab7650cfda17c47f3d

    • SHA256

      99947660df83c5a719647a69b9702b005953783748d5a1726bd50d4e817e1de6

    • SHA512

      6e6ffbfda6f2a99239b6d216eae9c381a9856383aa666471cc2aa6f5a9155fe5fe69872abfcf862804f115c0a8db99cfa16154784a3d06807ce9e4bf1433d926

    • SSDEEP

      1536:O0OoU5JPiSfPgW+WEcqEIMVSSxMgIXkcZ:O0U5T1/EcqEIMVSSxMgQVZ

    Score
    1/10
    behavioral19behavioral20

    • Target

      Bv9ARM.ch10.html

    • Size

      7KB

    • MD5

      769c91f56ca89899593c99aca78139d1

    • SHA1

      a830eb92237259057d7dfe39037e07dce3ffebd4

    • SHA256

      3c7cbb953888d5f59d4dbf14a4c7c3675c19033da335bb59d692a05cdbbbc56d

    • SHA512

      5c7edbd1fb7100577f0bd64c95b830760e73ab4d61afd89561bec4594bca8f5ad5166fded24a79ca576dae607d75d4f17a8365dfb9c9e49eeed92438b7070da1

    • SSDEEP

      96:OBAvOHe5T50VV2yNaLgAAKyfdyt7IxNKgegYI7XJ4zJa1JUC/byFyT1D+qmWzrz4:OyvOH5OyNS28tWma1eyXDHaHPTy0

    Score
    1/10
    behavioral21behavioral22

    • Target

      Bv9ARM.html

    • Size

      25KB

    • MD5

      8b3ba62e69b1d6d24c6668973c59ce42

    • SHA1

      c548d891461d90c575ae36384d7a193460eb0430

    • SHA256

      18d59de214bd9f1d39c19bef27f739844f29bcf9d00f2fb9843c09768d8e9580

    • SHA512

      2d8999aae7a5ed37e3a4c003288351ed93472d2328fca1058528a2d9f6520065befaf685e013c9284b8e2632c1c438ab935c05c36243443f84b34af0f3faf6e6

    • SSDEEP

      192:OyvOHNepNSpKp6TDIpctwjhGr3FPWdXxkeZdb3dVanSB6XKMWma1eyXDHaHzz0:OyvOt0Yw4DIqttJ6ueZnYyXDHa0

    Score
    1/10
    behavioral23behavioral24

    • Target

      Bv9ARM.pdf

    • Size

      1.3MB

    • MD5

      18b5196c74434e250db6cc0cf2884da3

    • SHA1

      8d0729c3fe73460c3d2890e14cac83a7dd522595

    • SHA256

      6c8c125a2efc3b6c39851039fa0c9c578e436f583f35e7a7c6e988a7df324dd2

    • SHA512

      dcface7f4b95a24f672ec39dc43bc5d2898fd4b8ae74e342ea2c4ff40ebc9c4f9c8d2d5c7836b0058217ccf3aa8617d2dcc070161adb12b48424ebf33a30ddb8

    • SSDEEP

      24576:1PiwDOwJcp0FQfzPjqZWUiYN/+kIfIWeugeSs/X2tl+1a:RtPJcpBqZWUiHeuSc1a

    Score
    1/10
    behavioral25behavioral26

    • Target

      CHANGES

    • Size

      418KB

    • MD5

      087c7aa9215370770f3ed748fb03b714

    • SHA1

      e35cfe0ed6a138758a84658f773ae944ae8ba05b

    • SHA256

      1a316145581b2efacc6a3f978ad73dc3f825603b1a6cbf997334d6baa4ec94bc

    • SHA512

      ec968a94a3f8820a4772409e3404654953b0acca5f378e26b4c3a7cf1714401064f61d0377e5d6cb1669a58cd5550e4bce4f1a8097be3d60942b8b113fd2a11e

    • SSDEEP

      12288:ajdz1Nbn79jfiX+bS8TjmTUuROvx32MfAuokyIm3vZFqP:aJz1Nbn79jfiX+bLmTUuROJ32MfAuokt

    Score
    1/10
    behavioral27behavioral28

    • Target

      HISTORY

    • Size

      12KB

    • MD5

      4d0efc39cd7179bd2a23532d86084691

    • SHA1

      80e8b060806d43d995d1ae4019aa8be867da3466

    • SHA256

      84e32d2c3a06cc8c160156e440619835f70ace83aa4e8bee9c6be7ae77ff5929

    • SHA512

      f8be48756df15750aee207b636f21d8b6680290fb876024cc8e1d7539a722aad1b4a3ef6ca996fb4e2a95d38fc528cc0019dccea10a19149da1125ebfcf5980a

    • SSDEEP

      384:JU1IFHwblfSldLjb/OXX6S4vc4MSWA0Njw:JOtbZSlBjb/sXH2WbG

    Score
    1/10
    behavioral29behavioral30

    • Target

      arpaname.exe

    • Size

      6KB

    • MD5

      9026adc30e3c88baa35cda35eed90a3e

    • SHA1

      3be7b2129eb31e9b1ae2fee0a55fa1f1b898f42a

    • SHA256

      874fa256bd7de18b0b482a4a475dff58cbfe43902c6e64f13c00cabd7d1e6f2f

    • SHA512

      b19cb2ad39e6fe9658cc6b13838ed94d674b9a15bfc64a3b0ca2d853d03232259ef586f508e92da82e4caa5d2d1e3b4aa682eff8be5637c5a35906d65222a455

    • SSDEEP

      96:Mg/64kOrFRlKzmdTkDDMZ71+Sj+ZPMTcWdi6cZkqAoMVthBi:Mg/NkmvZ71+U+NMTcWdi6CkqVGk

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks