General

  • Target

    b7246feff3e13f0f53a791587396ea57d44e2c6ce70c9662d4f15de4e90dd424.zip.zip

  • Size

    11.1MB

  • Sample

    231107-rql3fsag34

  • MD5

    226420c09945226e770c75da8f1e578f

  • SHA1

    867386ebaa9db26a95b54cf9e50153d800192858

  • SHA256

    4acf1581ad3341dac2f665a455ad97b3dfebe4cb71e4d7332dd11fdc908c1f8e

  • SHA512

    d82699cedc32919418dec75926b7902652d1d6673e8c3ae81b2706b6c3c4dcac5fbdfabd64bc7448abac99327fae019197e27b57f243434ff3dd703348f17faf

  • SSDEEP

    196608:wlGBiAH7ilZKDGO79FrUPOSpjfZoxYFa0KnOzL4c1M9+vZx+a1VSO3U7:wudQIDGK9pQjRox/ZnOfM9O+a1VSaE

Score
3/10

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      2.1MB

    • MD5

      5688870e57784b167eb8883564d0a00d

    • SHA1

      9350e5c84916127f7aceaffdfaf00a8d113ca512

    • SHA256

      9e4d03c1d9a10c759b8034cf198436a7d72a2c5dbfef98c1ebd7d3d3adb00109

    • SHA512

      f51bc1bf52a6855858852bfeb6fdd71d5c7d291b608d6e778dfed3eb9a7b9cd59ad31f976a712a0c878c79f5f8871f78c98129984b47c19e0a2ceef3046fa971

    • SSDEEP

      24576:WeHxf2KKOYUp+MWAjdun30BL2A6xImX9DTsxG8WUsAS2kYaF95:vHh+UzhEx74WS7aF

    Score
    1/10
    • Target

      bindevt.dll

    • Size

      444KB

    • MD5

      c66385f22734df81af059da793f19c6e

    • SHA1

      2609d58cc559448aa59233ddf2808122dad30fda

    • SHA256

      af7557e7357cab9d7221adfef4ba657cc46e8e2096fa94eab4ce8d443407018f

    • SHA512

      42d6bb252c9e75b327297362bba8c2a2337a76c406b69bace49c8ef0de914c619a1fad0fb6d165fcf64584223eb93267fe53c717999b855506a960534e24c893

    • SSDEEP

      6144:+7c8Zh3n+eb6n/yMxK4ANV0ulsnWz1fmemDiM94hhXBaF6:+7hZh3+eW/yMxKyulsAmemDilLRH

    Score
    1/10
    • Target

      dig.exe

    • Size

      136KB

    • MD5

      98e1ca8961d7469d91396bc058d2ae35

    • SHA1

      02107a3d0a77979d4006f8098c94abc5ad044352

    • SHA256

      37e43df36bee464ffab53e306d843b8a3d4369aec0c958fb30c4769f69f62159

    • SHA512

      22573baeb1848876ef0872973deece38930f4a6e2153463b85dd9435aa18f0435d30e27f86d3bf96b5db12b26ea4b86755fed53c8d313bed8d0ac6f00f78ae03

    • SSDEEP

      3072:AoZEqw14/RwTIFUI7ViZlKKXWxD4WmUg:A/qS4AoUI7VQnuD4W

    Score
    1/10
    • Target

      dnssec-dsfromkey.exe

    • Size

      60KB

    • MD5

      4fe48f881f67847a1791b704d7f12a3c

    • SHA1

      fd3058c475897f5cc06fbe1248fb6acba8d5bbec

    • SHA256

      ab32b298a9635bdabe6843e3cafdf512671227bae3788ad4dba77f56f8a66310

    • SHA512

      1e9a347790f52a4c0e1a97691dd7b3b0fba1ac3c667ac139831dd3835bfba01a97610443576645238cdda9c096945831d63ae23f369400c44cd186e16b21e9da

    • SSDEEP

      384:MiuSdd4u+GRdLK5x49ir7k4jk2uxzOaNCBML0l3Iq8EPxwU5hfVYx3Yx4Zxd0ZyB:dU/7K2k2uxzCi24HEGUHVm3m44oP

    Score
    1/10
    • Target

      dnssec-keyfromlabel.exe

    • Size

      56KB

    • MD5

      17c2c6d72cf49623b52ce93d9fbab088

    • SHA1

      23410459b3fc1f27dab075e96f1ec50eca0ddee6

    • SHA256

      e4f183a7155662cb067b7a2f4e657062d4a3756b9e581c85a8e29a4a876203ae

    • SHA512

      dc366339a8862cc39f0819fbfa40da30914a0f1336bbee9c4b107ed8c3ded401cf7480803070ab811c3fc208cf518324fc23707379d29f29312f1c83929ad124

    • SSDEEP

      384:JdF9QVnbEbabpLW+SnqEP7mqif8xLu8zGZX26n221k6vxwU56kTz/UZy6oP:/77sLfYAkhu8zcm7kmUnywP

    Score
    1/10
    • Target

      dnssec-keygen.exe

    • Size

      64KB

    • MD5

      efd0040471daf3c464bfd85bcc7de38f

    • SHA1

      3d42d14b061d589d9519f70372efc0c71ce19058

    • SHA256

      400e94668baccf4e920b47919d655fcb5c9694c57d4eb04b4f0a98eaab37efb6

    • SHA512

      e07ae28a5ebe0e995c8de221368deaeb99002861c5eec5bc8d4b4fd718fc0d9b9b6acbe9039a573b21f73ca91d9f057dbbbb8b6717876add3662c2158e1b9ba1

    • SSDEEP

      768:rel/0zhVsCCQUrGYMDjNazTOf1pmU6gwP:relLOGOf1pmU6d

    Score
    1/10
    • Target

      dnssec-signzone.exe

    • Size

      112KB

    • MD5

      0336dec5c4683f5ed1c8ab583fe8ce61

    • SHA1

      03d9ad20816e501923a2870fbba51daaa9b54b4e

    • SHA256

      dcfbea64137818c7c3b0bf3e0f9f984173d1695d90407f8a2ccbf8d077877879

    • SHA512

      7cd5feefbaf76eced1e10c2e7b25a950adf81bff92712e326de59d40d57c64ef00c7457f303a061e3fd75e4f93f4a179fe7b1ef8b24bd811940fa3a2db08160b

    • SSDEEP

      1536:wCiPOzEpUDEATR2byOKXmyAKVdgIM4mUfztAtXT:CP+DRMKXmyAKVdgIM4mUfm

    Score
    1/10
    • Target

      host.exe

    • Size

      116KB

    • MD5

      76d11144ce045e81673a9e868bec59de

    • SHA1

      bb2debc5d6c12b27cc65d7cd0cdc8c4bc11c2bcd

    • SHA256

      4da37d85828ad2442f82dd8e9710aab6c779d2f79e184502a89c8d9d466a57fc

    • SHA512

      68b257b4dcffcaae60f889c40ca0eca60610be64665426eb4c0dfeab1f18fcebda48fbeffbfc41595cc8845c4d198da66cda6ec24c843c0c836cc3d25df7c9f3

    • SSDEEP

      1536:ZxO6s2vCfG01Fk55AmIb3zwTVJu/KKRIXWxD44GUYSrZ+:63241F4Ub3zwTCBRIXWxD44GUhrZ

    Score
    1/10
    • Target

      libbind9.dll

    • Size

      88KB

    • MD5

      9b668e1f4dbfbcf434cf6f52b8a8c936

    • SHA1

      fcc9cd6f930967026e5fb94f5411bff0627c0aa9

    • SHA256

      1eef80801c2fc69d8afde972262b15ff4083a9814d7e734e580b55b1af82f855

    • SHA512

      81fcc50a8ac3caea8bfb8bee0faa8f313c05afb7985ae730436837583c9b100c11cd1ab5f3608854ba97dc4d9a1089a46a2fb96205207556d20a292362dd2561

    • SSDEEP

      768:QnAHs+LaOs/8DraH1Tx4eQgbBDH2C8yf0nzcsnd4dLmU32y+gjP4y:TZLaO8H1TxvQgdDG5Rd4dLmU32y+gjA

    Score
    1/10
    • Target

      libdns.dll

    • Size

      2.2MB

    • MD5

      b440c8425e0d2a43dba77f6034ff8a35

    • SHA1

      340f605f0d8b3646e3d617399519586af23bedfc

    • SHA256

      5f034bd6e00de5f85a1db796fc295d260196c6b7c24dc96397674b258ab9b041

    • SHA512

      ca6c90e70281e6e26e1994daab688b452386a94a8b4e8f274a74e10fd0f18c983777b6904ab136f3bed93ee276f016ed44eee72f70d7f32276cbe92ade45f2a0

    • SSDEEP

      24576:9QIxvBkD7oSyhcb8cpBoRJhiR0AjsxhUzfsPjkK6tb2TORfMo:XBkD7B0hUzfsPsb2T

    Score
    1/10
    • Target

      libeay32.dll

    • Size

      988KB

    • MD5

      97c3b6b4ebddfa7fad3d9aab669b670b

    • SHA1

      ac91e4981def1ae268d4aa1359ee531f277d1aae

    • SHA256

      e7016eabd675a3f26ca362510f110bd7355294bd1c3f54d03b2fc5406a1d4158

    • SHA512

      d6f0c72b8c1549c00ff02661c27fd8389726768f3268739ff1ace60792828bb77e285b489366642e668d2e2e82fd1287a237d69c3d8d34ffdac4a02945a8bb90

    • SSDEEP

      24576:FvAfySqpHPkzO0rCZLG0QdTIuJRpJ2lTCmQ5AqNk:yl28zgZq0kTDRpuCmQOsk

    Score
    1/10
    • Target

      libisc.dll

    • Size

      484KB

    • MD5

      a164228156d339cc30157205ef174311

    • SHA1

      8f9486cb17e05789c2aa04fc09c010f2a76bef18

    • SHA256

      e81eeb0ff606c4901be59ffc23cd3b2aea29e74220ab34c5d06990a188a0a8ca

    • SHA512

      6888500aab252f0001e1aae8eeeece9727a425bc7fd58690dfe1fce8cef878ba8453d65dc161856bf239c9f500ad6638fea5f7f17206f554191a23e0581189a6

    • SSDEEP

      12288:WYMndVukNdAwUE7rTb+6W43Z7RsLRXIG2ZKj:UndVuk7sLRYJYj

    Score
    1/10
    • Target

      libisccc.dll

    • Size

      72KB

    • MD5

      f5aa3f8618112a2683e6e731f6388746

    • SHA1

      b0bd82412f7b71058d5936dac2705098e9674c93

    • SHA256

      cc7deb89092ddf766b47677695751186e7135c571642dd9bc1864756103b45d8

    • SHA512

      2171f17c4102f5d573074a445c5c8966fb42246b99566242a63d9ed161f5a11381a0e5959e7b36037ae3e5f5e02b90d30b5af4360803779407fe5c0ca13cfc12

    • SSDEEP

      1536:iFALwyLHocHjf2TH9IDZl1gypZfeDfb4pNFnHnjUPn3mU+fMFj:BJToYjf2TH9CZl1gypZfefb47FnHnjUJ

    Score
    1/10
    • Target

      libisccfg.dll

    • Size

      116KB

    • MD5

      722690d402b6e831c407d557b2c516ec

    • SHA1

      d1915cf7fc3f99358c6efdcf3347fb4f5c071d56

    • SHA256

      2dd1edbf35184722dde8f20d7e4f1204a302977b2b895adc28c9d9ae2b30d638

    • SHA512

      7f81093825509c6ea544950ad15148a45f765f7c332b17866a1f11de888495a0674c22eaa306c413226c43c891a23e5b12036952ed8522832819dc6b68a000c9

    • SSDEEP

      1536:w2JATLNi3z4BATYajxcMu521cAQzKXsbmUXdnUQWjPH:tJATL1BARjh1cAQztmUXdqT

    Score
    1/10
    • Target

      liblwres.dll

    • Size

      128KB

    • MD5

      509c44a275966df35013f87134a6ce7e

    • SHA1

      a7bd3e13fd9dde26d68ec3d4ae3abd044f85c32c

    • SHA256

      6f5420e45b47433a930d52be7cfc3999211ec3457ec75f3c114e90d1106a017b

    • SHA512

      9a2a018d04c3e63f4f361a577414a63f82610557886fd7ba2a3e750a556e0a193156ebd4038ad89e3e97b398e112b5838ddf7202adb25d924600c18297a47cda

    • SSDEEP

      3072:H2pSt7FeezQgtaJKTgDJaV/d2kk87DnXiAmGQ8qZumUeXp:WMpeezQgtaJKTgD4xK

    Score
    1/10
    • Target

      named-checkconf.exe

    • Size

      56KB

    • MD5

      14348b9a647b73307d121de49706d298

    • SHA1

      35a7e4b91bcaa283e312c7d8a7e13f6a52f838ea

    • SHA256

      77f94ec064223277601c7c598cb787bfd8a25d8d15fabe3d8433ad34b9bda2c2

    • SHA512

      9b75e637a4d90116f14b2cc25fae2b3b80f9a71eb6606206339c05a53bc8e72ef220740684278337cd6be438b6ebf37b42d28050383fa428d4cf93c6a6cf53b4

    • SSDEEP

      384:tjiAD3QZnD/q6QRw/NmLH3lt6I9ah5ZoQtswUVWnB1Kz8+X5sS7aIFCPxwUbWgTN:rY8KoGB1Kzd6YUGUv83z/UP

    Score
    1/10

MITRE ATT&CK Matrix

Tasks