Overview
overview
3Static
static
3BINDInstall.exe
windows7-x64
1BINDInstall.exe
windows10-2004-x64
1bindevt.dll
windows7-x64
1bindevt.dll
windows10-2004-x64
1dig.exe
windows7-x64
dig.exe
windows10-2004-x64
dnssec-dsfromkey.exe
windows7-x64
dnssec-dsfromkey.exe
windows10-2004-x64
dnssec-key...el.exe
windows7-x64
dnssec-key...el.exe
windows10-2004-x64
dnssec-keygen.exe
windows7-x64
dnssec-keygen.exe
windows10-2004-x64
dnssec-signzone.exe
windows7-x64
dnssec-signzone.exe
windows10-2004-x64
host.exe
windows7-x64
host.exe
windows10-2004-x64
libbind9.dll
windows7-x64
1libbind9.dll
windows10-2004-x64
1libdns.dll
windows7-x64
1libdns.dll
windows10-2004-x64
1libeay32.dll
windows7-x64
1libeay32.dll
windows10-2004-x64
1libisc.dll
windows7-x64
1libisc.dll
windows10-2004-x64
1libisccc.dll
windows7-x64
1libisccc.dll
windows10-2004-x64
1libisccfg.dll
windows7-x64
1libisccfg.dll
windows10-2004-x64
1liblwres.dll
windows7-x64
1liblwres.dll
windows10-2004-x64
1named-checkconf.exe
windows7-x64
named-checkconf.exe
windows10-2004-x64
General
-
Target
b7246feff3e13f0f53a791587396ea57d44e2c6ce70c9662d4f15de4e90dd424.zip.zip
-
Size
11.1MB
-
Sample
231107-rql3fsag34
-
MD5
226420c09945226e770c75da8f1e578f
-
SHA1
867386ebaa9db26a95b54cf9e50153d800192858
-
SHA256
4acf1581ad3341dac2f665a455ad97b3dfebe4cb71e4d7332dd11fdc908c1f8e
-
SHA512
d82699cedc32919418dec75926b7902652d1d6673e8c3ae81b2706b6c3c4dcac5fbdfabd64bc7448abac99327fae019197e27b57f243434ff3dd703348f17faf
-
SSDEEP
196608:wlGBiAH7ilZKDGO79FrUPOSpjfZoxYFa0KnOzL4c1M9+vZx+a1VSO3U7:wudQIDGK9pQjRox/ZnOfM9O+a1VSaE
Static task
static1
Behavioral task
behavioral1
Sample
BINDInstall.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
BINDInstall.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
bindevt.dll
Resource
win7-20231025-en
Behavioral task
behavioral4
Sample
bindevt.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral5
Sample
dig.exe
Resource
win7-20231025-en
Behavioral task
behavioral6
Sample
dig.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
dnssec-dsfromkey.exe
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
dnssec-dsfromkey.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral9
Sample
dnssec-keyfromlabel.exe
Resource
win7-20231020-en
Behavioral task
behavioral10
Sample
dnssec-keyfromlabel.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral11
Sample
dnssec-keygen.exe
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
dnssec-keygen.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral13
Sample
dnssec-signzone.exe
Resource
win7-20231025-en
Behavioral task
behavioral14
Sample
dnssec-signzone.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral15
Sample
host.exe
Resource
win7-20231020-en
Behavioral task
behavioral16
Sample
host.exe
Resource
win10v2004-20231025-en
Behavioral task
behavioral17
Sample
libbind9.dll
Resource
win7-20231020-en
Behavioral task
behavioral18
Sample
libbind9.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral19
Sample
libdns.dll
Resource
win7-20231020-en
Behavioral task
behavioral20
Sample
libdns.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral21
Sample
libeay32.dll
Resource
win7-20231020-en
Behavioral task
behavioral22
Sample
libeay32.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral23
Sample
libisc.dll
Resource
win7-20231020-en
Behavioral task
behavioral24
Sample
libisc.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral25
Sample
libisccc.dll
Resource
win7-20231020-en
Behavioral task
behavioral26
Sample
libisccc.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral27
Sample
libisccfg.dll
Resource
win7-20231023-en
Behavioral task
behavioral28
Sample
libisccfg.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral29
Sample
liblwres.dll
Resource
win7-20231020-en
Behavioral task
behavioral30
Sample
liblwres.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral31
Sample
named-checkconf.exe
Resource
win7-20231020-en
Behavioral task
behavioral32
Sample
named-checkconf.exe
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
BINDInstall.exe
-
Size
2.1MB
-
MD5
5688870e57784b167eb8883564d0a00d
-
SHA1
9350e5c84916127f7aceaffdfaf00a8d113ca512
-
SHA256
9e4d03c1d9a10c759b8034cf198436a7d72a2c5dbfef98c1ebd7d3d3adb00109
-
SHA512
f51bc1bf52a6855858852bfeb6fdd71d5c7d291b608d6e778dfed3eb9a7b9cd59ad31f976a712a0c878c79f5f8871f78c98129984b47c19e0a2ceef3046fa971
-
SSDEEP
24576:WeHxf2KKOYUp+MWAjdun30BL2A6xImX9DTsxG8WUsAS2kYaF95:vHh+UzhEx74WS7aF
Score1/10 -
-
-
Target
bindevt.dll
-
Size
444KB
-
MD5
c66385f22734df81af059da793f19c6e
-
SHA1
2609d58cc559448aa59233ddf2808122dad30fda
-
SHA256
af7557e7357cab9d7221adfef4ba657cc46e8e2096fa94eab4ce8d443407018f
-
SHA512
42d6bb252c9e75b327297362bba8c2a2337a76c406b69bace49c8ef0de914c619a1fad0fb6d165fcf64584223eb93267fe53c717999b855506a960534e24c893
-
SSDEEP
6144:+7c8Zh3n+eb6n/yMxK4ANV0ulsnWz1fmemDiM94hhXBaF6:+7hZh3+eW/yMxKyulsAmemDilLRH
Score1/10 -
-
-
Target
dig.exe
-
Size
136KB
-
MD5
98e1ca8961d7469d91396bc058d2ae35
-
SHA1
02107a3d0a77979d4006f8098c94abc5ad044352
-
SHA256
37e43df36bee464ffab53e306d843b8a3d4369aec0c958fb30c4769f69f62159
-
SHA512
22573baeb1848876ef0872973deece38930f4a6e2153463b85dd9435aa18f0435d30e27f86d3bf96b5db12b26ea4b86755fed53c8d313bed8d0ac6f00f78ae03
-
SSDEEP
3072:AoZEqw14/RwTIFUI7ViZlKKXWxD4WmUg:A/qS4AoUI7VQnuD4W
Score1/10 -
-
-
Target
dnssec-dsfromkey.exe
-
Size
60KB
-
MD5
4fe48f881f67847a1791b704d7f12a3c
-
SHA1
fd3058c475897f5cc06fbe1248fb6acba8d5bbec
-
SHA256
ab32b298a9635bdabe6843e3cafdf512671227bae3788ad4dba77f56f8a66310
-
SHA512
1e9a347790f52a4c0e1a97691dd7b3b0fba1ac3c667ac139831dd3835bfba01a97610443576645238cdda9c096945831d63ae23f369400c44cd186e16b21e9da
-
SSDEEP
384:MiuSdd4u+GRdLK5x49ir7k4jk2uxzOaNCBML0l3Iq8EPxwU5hfVYx3Yx4Zxd0ZyB:dU/7K2k2uxzCi24HEGUHVm3m44oP
Score1/10 -
-
-
Target
dnssec-keyfromlabel.exe
-
Size
56KB
-
MD5
17c2c6d72cf49623b52ce93d9fbab088
-
SHA1
23410459b3fc1f27dab075e96f1ec50eca0ddee6
-
SHA256
e4f183a7155662cb067b7a2f4e657062d4a3756b9e581c85a8e29a4a876203ae
-
SHA512
dc366339a8862cc39f0819fbfa40da30914a0f1336bbee9c4b107ed8c3ded401cf7480803070ab811c3fc208cf518324fc23707379d29f29312f1c83929ad124
-
SSDEEP
384:JdF9QVnbEbabpLW+SnqEP7mqif8xLu8zGZX26n221k6vxwU56kTz/UZy6oP:/77sLfYAkhu8zcm7kmUnywP
Score1/10 -
-
-
Target
dnssec-keygen.exe
-
Size
64KB
-
MD5
efd0040471daf3c464bfd85bcc7de38f
-
SHA1
3d42d14b061d589d9519f70372efc0c71ce19058
-
SHA256
400e94668baccf4e920b47919d655fcb5c9694c57d4eb04b4f0a98eaab37efb6
-
SHA512
e07ae28a5ebe0e995c8de221368deaeb99002861c5eec5bc8d4b4fd718fc0d9b9b6acbe9039a573b21f73ca91d9f057dbbbb8b6717876add3662c2158e1b9ba1
-
SSDEEP
768:rel/0zhVsCCQUrGYMDjNazTOf1pmU6gwP:relLOGOf1pmU6d
Score1/10 -
-
-
Target
dnssec-signzone.exe
-
Size
112KB
-
MD5
0336dec5c4683f5ed1c8ab583fe8ce61
-
SHA1
03d9ad20816e501923a2870fbba51daaa9b54b4e
-
SHA256
dcfbea64137818c7c3b0bf3e0f9f984173d1695d90407f8a2ccbf8d077877879
-
SHA512
7cd5feefbaf76eced1e10c2e7b25a950adf81bff92712e326de59d40d57c64ef00c7457f303a061e3fd75e4f93f4a179fe7b1ef8b24bd811940fa3a2db08160b
-
SSDEEP
1536:wCiPOzEpUDEATR2byOKXmyAKVdgIM4mUfztAtXT:CP+DRMKXmyAKVdgIM4mUfm
Score1/10 -
-
-
Target
host.exe
-
Size
116KB
-
MD5
76d11144ce045e81673a9e868bec59de
-
SHA1
bb2debc5d6c12b27cc65d7cd0cdc8c4bc11c2bcd
-
SHA256
4da37d85828ad2442f82dd8e9710aab6c779d2f79e184502a89c8d9d466a57fc
-
SHA512
68b257b4dcffcaae60f889c40ca0eca60610be64665426eb4c0dfeab1f18fcebda48fbeffbfc41595cc8845c4d198da66cda6ec24c843c0c836cc3d25df7c9f3
-
SSDEEP
1536:ZxO6s2vCfG01Fk55AmIb3zwTVJu/KKRIXWxD44GUYSrZ+:63241F4Ub3zwTCBRIXWxD44GUhrZ
Score1/10 -
-
-
Target
libbind9.dll
-
Size
88KB
-
MD5
9b668e1f4dbfbcf434cf6f52b8a8c936
-
SHA1
fcc9cd6f930967026e5fb94f5411bff0627c0aa9
-
SHA256
1eef80801c2fc69d8afde972262b15ff4083a9814d7e734e580b55b1af82f855
-
SHA512
81fcc50a8ac3caea8bfb8bee0faa8f313c05afb7985ae730436837583c9b100c11cd1ab5f3608854ba97dc4d9a1089a46a2fb96205207556d20a292362dd2561
-
SSDEEP
768:QnAHs+LaOs/8DraH1Tx4eQgbBDH2C8yf0nzcsnd4dLmU32y+gjP4y:TZLaO8H1TxvQgdDG5Rd4dLmU32y+gjA
Score1/10 -
-
-
Target
libdns.dll
-
Size
2.2MB
-
MD5
b440c8425e0d2a43dba77f6034ff8a35
-
SHA1
340f605f0d8b3646e3d617399519586af23bedfc
-
SHA256
5f034bd6e00de5f85a1db796fc295d260196c6b7c24dc96397674b258ab9b041
-
SHA512
ca6c90e70281e6e26e1994daab688b452386a94a8b4e8f274a74e10fd0f18c983777b6904ab136f3bed93ee276f016ed44eee72f70d7f32276cbe92ade45f2a0
-
SSDEEP
24576:9QIxvBkD7oSyhcb8cpBoRJhiR0AjsxhUzfsPjkK6tb2TORfMo:XBkD7B0hUzfsPsb2T
Score1/10 -
-
-
Target
libeay32.dll
-
Size
988KB
-
MD5
97c3b6b4ebddfa7fad3d9aab669b670b
-
SHA1
ac91e4981def1ae268d4aa1359ee531f277d1aae
-
SHA256
e7016eabd675a3f26ca362510f110bd7355294bd1c3f54d03b2fc5406a1d4158
-
SHA512
d6f0c72b8c1549c00ff02661c27fd8389726768f3268739ff1ace60792828bb77e285b489366642e668d2e2e82fd1287a237d69c3d8d34ffdac4a02945a8bb90
-
SSDEEP
24576:FvAfySqpHPkzO0rCZLG0QdTIuJRpJ2lTCmQ5AqNk:yl28zgZq0kTDRpuCmQOsk
Score1/10 -
-
-
Target
libisc.dll
-
Size
484KB
-
MD5
a164228156d339cc30157205ef174311
-
SHA1
8f9486cb17e05789c2aa04fc09c010f2a76bef18
-
SHA256
e81eeb0ff606c4901be59ffc23cd3b2aea29e74220ab34c5d06990a188a0a8ca
-
SHA512
6888500aab252f0001e1aae8eeeece9727a425bc7fd58690dfe1fce8cef878ba8453d65dc161856bf239c9f500ad6638fea5f7f17206f554191a23e0581189a6
-
SSDEEP
12288:WYMndVukNdAwUE7rTb+6W43Z7RsLRXIG2ZKj:UndVuk7sLRYJYj
Score1/10 -
-
-
Target
libisccc.dll
-
Size
72KB
-
MD5
f5aa3f8618112a2683e6e731f6388746
-
SHA1
b0bd82412f7b71058d5936dac2705098e9674c93
-
SHA256
cc7deb89092ddf766b47677695751186e7135c571642dd9bc1864756103b45d8
-
SHA512
2171f17c4102f5d573074a445c5c8966fb42246b99566242a63d9ed161f5a11381a0e5959e7b36037ae3e5f5e02b90d30b5af4360803779407fe5c0ca13cfc12
-
SSDEEP
1536:iFALwyLHocHjf2TH9IDZl1gypZfeDfb4pNFnHnjUPn3mU+fMFj:BJToYjf2TH9CZl1gypZfefb47FnHnjUJ
Score1/10 -
-
-
Target
libisccfg.dll
-
Size
116KB
-
MD5
722690d402b6e831c407d557b2c516ec
-
SHA1
d1915cf7fc3f99358c6efdcf3347fb4f5c071d56
-
SHA256
2dd1edbf35184722dde8f20d7e4f1204a302977b2b895adc28c9d9ae2b30d638
-
SHA512
7f81093825509c6ea544950ad15148a45f765f7c332b17866a1f11de888495a0674c22eaa306c413226c43c891a23e5b12036952ed8522832819dc6b68a000c9
-
SSDEEP
1536:w2JATLNi3z4BATYajxcMu521cAQzKXsbmUXdnUQWjPH:tJATL1BARjh1cAQztmUXdqT
Score1/10 -
-
-
Target
liblwres.dll
-
Size
128KB
-
MD5
509c44a275966df35013f87134a6ce7e
-
SHA1
a7bd3e13fd9dde26d68ec3d4ae3abd044f85c32c
-
SHA256
6f5420e45b47433a930d52be7cfc3999211ec3457ec75f3c114e90d1106a017b
-
SHA512
9a2a018d04c3e63f4f361a577414a63f82610557886fd7ba2a3e750a556e0a193156ebd4038ad89e3e97b398e112b5838ddf7202adb25d924600c18297a47cda
-
SSDEEP
3072:H2pSt7FeezQgtaJKTgDJaV/d2kk87DnXiAmGQ8qZumUeXp:WMpeezQgtaJKTgD4xK
Score1/10 -
-
-
Target
named-checkconf.exe
-
Size
56KB
-
MD5
14348b9a647b73307d121de49706d298
-
SHA1
35a7e4b91bcaa283e312c7d8a7e13f6a52f838ea
-
SHA256
77f94ec064223277601c7c598cb787bfd8a25d8d15fabe3d8433ad34b9bda2c2
-
SHA512
9b75e637a4d90116f14b2cc25fae2b3b80f9a71eb6606206339c05a53bc8e72ef220740684278337cd6be438b6ebf37b42d28050383fa428d4cf93c6a6cf53b4
-
SSDEEP
384:tjiAD3QZnD/q6QRw/NmLH3lt6I9ah5ZoQtswUVWnB1Kz8+X5sS7aIFCPxwUbWgTN:rY8KoGB1Kzd6YUGUv83z/UP
Score1/10 -