Overview

overview

4

Static

static

4

BINDInstall.exe

windows7-x64

1

BINDInstall.exe

windows10-2004-x64

1

Bv9ARM.ch01.html

windows7-x64

1

Bv9ARM.ch01.html

windows10-2004-x64

1

Bv9ARM.ch02.html

windows7-x64

1

Bv9ARM.ch02.html

windows10-2004-x64

1

Bv9ARM.ch03.html

windows7-x64

1

Bv9ARM.ch03.html

windows10-2004-x64

1

Bv9ARM.ch04.html

windows7-x64

1

Bv9ARM.ch04.html

windows10-2004-x64

1

Bv9ARM.ch05.html

windows7-x64

1

Bv9ARM.ch05.html

windows10-2004-x64

1

Bv9ARM.ch06.html

windows7-x64

1

Bv9ARM.ch06.html

windows10-2004-x64

1

Bv9ARM.ch07.html

windows7-x64

1

Bv9ARM.ch07.html

windows10-2004-x64

1

Bv9ARM.ch08.html

windows7-x64

1

Bv9ARM.ch08.html

windows10-2004-x64

1

Bv9ARM.ch09.html

windows7-x64

1

Bv9ARM.ch09.html

windows10-2004-x64

1

Bv9ARM.ch10.html

windows7-x64

1

Bv9ARM.ch10.html

windows10-2004-x64

1

Bv9ARM.html

windows7-x64

1

Bv9ARM.html

windows10-2004-x64

1

Bv9ARM.pdf

windows7-x64

1

Bv9ARM.pdf

windows10-2004-x64

1

README.vbs

windows7-x64

1

README.vbs

windows10-2004-x64

1

bindevt.dll

windows7-x64

1

bindevt.dll

windows10-2004-x64

1

dig.exe

windows7-x64

1

dig.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f687b570075cced8d575d4861d607dcaf699de90759121504de3d84ff667734.zip.zip

  • Size

    5.0MB

  • Sample

    231107-rvda4sbb43

  • MD5

    04a6144cbd6fbffcf51f4042aaf4e851

  • SHA1

    5b579811eff0a5c2a82361d69892b2710858a3f1

  • SHA256

    3f0ae5875dfbe21a768f0d5468677f286b6e024ad821d0449a73d54b3ce2838e

  • SHA512

    c332fa4cd076877b369f81c379c23069c9fe51e1664cc47d8e9d6ecd55f96145d66827318eea7cad2f7fdc485ceb8b0ee91f1907a33e7114bf0ed6a630bb6f05

  • SSDEEP

    98304:Ksn+n/KjXJXT2SxEaQWpDYvdNSsFGQNKxTSOgbb00R1f+8v:CCiClYvdNSJQs+kQl

Score
4/10
linkpdf

Malware Config

Targets

    • Target

      BINDInstall.exe

    • Size

      240KB

    • MD5

      db0956071b5bf6b2f9e0bcd36ce9458f

    • SHA1

      a4ccd60213fd82059558f461418ea8e6646718e2

    • SHA256

      ae35dfbdf547fabd1f668ffdd47b02a5427ed45e91965aed3fddc3802b1147b0

    • SHA512

      30d62f75ac5846e2ac6043c8ee8e63df05c617117fd505b335790febfca485492a955a9e8772c6c1f2441ed98320a0f7c5abe9612a035491a59a3e0cd36d45a5

    • SSDEEP

      3072:RI6JA21qCpjYYgVmpbIre/ecHLPoCUiobmf644CwNbNDFlVVJstWoFaETbG:a41oCpjYYUmdIr2DXUiD4LNDZ8F6

    Score
    1/10
    behavioral1behavioral2

    • Target

      Bv9ARM.ch01.html

    • Size

      25KB

    • MD5

      da31bf8894e16d2829188ac9405fe7e5

    • SHA1

      ffb892727e1a5f702a6d637998aac9c66044a4be

    • SHA256

      b8b320f503da0c87b04bc631ee1f1c3abb418939bf93e3434d004ec206b74156

    • SHA512

      a3d4540ddd86d8d59e8df9fcea815fe163c6d98fe06f7fd76f34e64b89608e2c6d9522ccd07a76c6d4e5bf237353e7acf3244f7565adae9a0f98f89d139a0bcb

    • SSDEEP

      384:yyvOmFYNiBOPYb/YLzgUd4gkOZi7l+xW386gOGpC8W:y0O6kwY/Zi8xW3WnAJ

    Score
    1/10
    behavioral3behavioral4

    • Target

      Bv9ARM.ch02.html

    • Size

      7KB

    • MD5

      0327c3e9ba30aebb0ac57eb7963a52fe

    • SHA1

      752c5de0611c2c748b79c8877d3b7398e8fc8ebb

    • SHA256

      5a7b6b695a3071a2d3711dfd7400b938621bac29d1a1cbd56457c8150dbf463f

    • SHA512

      ccad54e0993f50ab14e3f5af73a36c211461dbd8a549a72c62abe1a173ae6d66c9bef1bb73c747c1ea638444d6d119b32347177dbd434de10c0d37e1d283d5e6

    • SSDEEP

      192:yyvOHyQlNSgqkDqjT+/mmGDdrvvI16+sU2UJl/ExzTR/nV3xuFm0:yyvOSAYjBLZsatSJ

    Score
    1/10
    behavioral5behavioral6

    • Target

      Bv9ARM.ch03.html

    • Size

      38KB

    • MD5

      c90329d55847f15691a3564439b30983

    • SHA1

      049f07c33fd91398c58f34e5c70b23324dc00225

    • SHA256

      9533df7840e0b254804afc547a8bdfd0a9ce23a43b432bfcf47d629f7bcf41ad

    • SHA512

      64d61b03b86565ca20c97ef25f4b213cba05e9806cae7acdc4255c343659cef1ef8a0ec3c14ab89b8cb59b92938e8b7dea7ec59cf2d8fa370f509f675c0f65e5

    • SSDEEP

      384:yyvO6dYSW/tNiXxzIbdjSO7vzpkjLTq7af8GeGDg7FIRw4q/h+AYG7khERr4qgo:y0OHtYx8bdjxvijhf8GemgLpRRr4g

    Score
    1/10
    behavioral7behavioral8

    • Target

      Bv9ARM.ch04.html

    • Size

      50KB

    • MD5

      b11c2008450e87655dd43677ac0a952c

    • SHA1

      fe2f867fb103518d14339b4c24ac2d52c98faaf0

    • SHA256

      159df4ded2c2d94d9a4a807995eadde3fa287c4bdc9f6c83a6c2e52db82dfafd

    • SHA512

      e83229c5c4cbaf12597ff5775f02bf784b37cf899864762536d7a56c31788a3ddd44fb7b993b68d98729e3a4a0c89d4d6bcf4e4c2ffaf9fd3b44e8dcd9cb0adc

    • SSDEEP

      384:yyvOm3YRIAILBFo1UjerdQShKEE6PIT/JGNBwyqAqggkA5EYt4f/LoIFs3Fgii8t:y0OJJ1U8Kn6k/aakEB1Vnwcx+8Im

    Score
    1/10
    behavioral10behavioral9

    • Target

      Bv9ARM.ch05.html

    • Size

      6KB

    • MD5

      ff48c9a836db1fc55b40c1dda4bc5460

    • SHA1

      4602e5ca55051fa9ceba46677eb2796a75a4b559

    • SHA256

      a8ba83da4905b85644cb4db43e673daa1448cb0d18fa1e88f398bad52f1903bb

    • SHA512

      4116e34c9903a1def5d76bc18cd2a7ea05f7823da784c8a7308333a4fb822bb5fe29d7e5c0387f07935441bd83113db5cb235dfd55d9bc514de44cc5a4be457e

    • SSDEEP

      192:yyvOH44cNSpnfi0SkKZHlyK6Qar08+jg4gY0:yyvOYvYkI4H8Qi4C

    Score
    1/10
    behavioral11behavioral12

    • Target

      Bv9ARM.ch06.html

    • Size

      435KB

    • MD5

      14223bce6e439d2f22d749e2d2c7cf8f

    • SHA1

      b19c49be42bc1fd268d7da8f784c416c5fd0377e

    • SHA256

      3a27d4eced188bddff72d992bc3c6ce9499bfbad0df2b67e2cdc4cddcd6c85c3

    • SHA512

      59d7e48c436fc44027525fed8dd09f0f087852323f7affa8db1c52d3dfcbdfda9735a47cacf58cc1bd3464aea9820cd97cbb87378ffdf8259e0e88da5fe489f0

    • SSDEEP

      3072:y0h6wu3zJg1s5DehftM3fV9pCSNMwS5g53B7VpjVGCht5RPS5Wc:y0kpguDljS4VGe5RPZc

    Score
    1/10
    behavioral13behavioral14

    • Target

      Bv9ARM.ch07.html

    • Size

      12KB

    • MD5

      5c7fa8cc178039d7ba9c3722f5c7cf71

    • SHA1

      158964b8f6a0d020f7dcfc9c5c07070ae42d9963

    • SHA256

      e2090126e62ef1e09e6a21b51ac0feb6f45420626dc994695aae5ae113ddb332

    • SHA512

      fc45c23dba6e66f0c4818d74922cf754ce09a9665ccaac443f0407046ee151428fcf0e965d8a4904ea91ce187adadf476bc3d6e605094cc38dc3a37619b05d78

    • SSDEEP

      192:yyvOHA1FNSMuoTzGbOTtsrrr14k9h6B39rK9hkg0PkmP+YCBF0:yyvOgrYOLtsr3lU0OPqm

    Score
    1/10
    behavioral15behavioral16

    • Target

      Bv9ARM.ch08.html

    • Size

      6KB

    • MD5

      343f46928ff8aa90d2386dc8687c97a3

    • SHA1

      aec4ece49529681ccd09a71bca49bdf9ccc82373

    • SHA256

      ae7e27907a3b58d51345c6285a47843aaaa25ab80f8027848b5a906a9ff703b0

    • SHA512

      59ee0ab45eb54f872a5e0d300e45e0809222b6ca1a63b36b85865cad228c9d37f8c6230c013108574ea02fa23ea0a53169eddd89cbf23d9fafc1cdb02f1b5829

    • SSDEEP

      96:yBAvOHe5w4P0VVoIJNaLga+AK3fmeeXRjcd6eBezte83NedL3n2Ae+gonFPmnFYH:yyvOH3DJNSigjhNsXFmyGivN80

    Score
    1/10
    behavioral17behavioral18

    • Target

      Bv9ARM.ch09.html

    • Size

      49KB

    • MD5

      decc33793b342ceef764d8b251bada51

    • SHA1

      f54cf8a7b30dcc16c4ee2024e9da409f450bc27a

    • SHA256

      dc161296b67f8c89df858aed80a19b20844703c837502981f4eb6ee0c3aa653f

    • SHA512

      8eb01a9966d7a7ce004281c0b97b83d3d3774590e315128cafb8e2b81b3700883d1d2d56c87d9a2a0222428623d9b589bd781130e474daee786e46034277547b

    • SSDEEP

      384:yyvONaYtslx4U3mK1siN8I35lKDwwj6FHJa53nmHaCkTv5E57OVd965Rg4BvSZKR:y0O8MUb6I3mDIJpkTeMdkig

    Score
    1/10
    behavioral19behavioral20

    • Target

      Bv9ARM.ch10.html

    • Size

      4KB

    • MD5

      14db54e37a49bc182c1b31456c2cebad

    • SHA1

      ca8751b897074ae2c4f5a9f0f5be6cb85874bdcf

    • SHA256

      4d9f326949c4df24e50f2650ce5ac5cb739abc7028927f286593c1e9d58481e2

    • SHA512

      f9c2fd9f045ce9c2ea96d4dc57f441ad5b3d70b956676160d820215c30d1d5158b1f165c26a8deaba493a31b2b5204ee801db7b205e5b164ff1fdd5c31906598

    • SSDEEP

      96:yBAvOHe5p50VV2yNaLgAAKyfdytI4gQJ21JUC/bGD+qmWzNawAiaTvilgBfHU:yyvOH7OyNS28tN21gD5Ty0

    Score
    1/10
    behavioral21behavioral22

    • Target

      Bv9ARM.html

    • Size

      18KB

    • MD5

      418cc47efaa3f4025cc2337a0bc30496

    • SHA1

      eafd7f3d3396bf688b2ca520941caf0156e32cce

    • SHA256

      be2d43cc784462a809fa4e415b45be99bf5ef0c2cffb92cc2055b0af68bca424

    • SHA512

      1dd7a8820c848c9da85892030ae88e6beaf65d956ed5a3a21ed04402d8f0fb024f5f9c8a7d319a65d444bfc7f4dd5743b20d5dfb31413f4dfae954de0c8144ea

    • SSDEEP

      192:yyvOHiepNSpK3TnIpwBORjl+rGIs4xkeIAb3dGGISBabN21gD9z0:yyvOC0YwDnIiBOtheIQeDS

    Score
    1/10
    behavioral23behavioral24

    • Target

      Bv9ARM.pdf

    • Size

      797KB

    • MD5

      036d0ee001720d4e65381eb5e52f6683

    • SHA1

      795dfe2cb346fb54bc281e8d4314a18b0c711bc8

    • SHA256

      23564b167c03cc3d559f63d9afedc1c2246d76938e358701ea7d628959bef5c2

    • SHA512

      c490333cf3c4d5148f3d29d20e1e8f399a92d43a22d18bed113bbd0de3f716bff791ec6032033cecf218835347d8599a0963a3ce2653ab021d02529dd3cbcaf2

    • SSDEEP

      12288:L5MAjs5hjdhy9ssXeFEGcvvSdM1CnvcytDZjQmM9pXM+eCHreQXM40:LuAjWFy9UmjSOgvcytDy99e/e0

    Score
    1/10
    behavioral25behavioral26

    • Target

      README

    • Size

      19KB

    • MD5

      50cd48e96c8c8ece0590185c054e64f7

    • SHA1

      3e8d3ca033f9d29170ad5e53b1350a0d6250d2f5

    • SHA256

      e62a0a26855e67ebf32d13521b61ab8bee4c0711cecd279b5d1bed548c5febff

    • SHA512

      698e4691d5659cdffaa2a787d26dabff4f6475ffc7ee4d32cf652c7ea7fe0bc7cfc0a319b23efda69b2bb6d8ce1b87efbb587ecbffba54fc995bb5bdcbfcf386

    • SSDEEP

      384:qiQSldLjb/OXX6S4ac4MgWCIf7hE3EN88WuTIxsn1s:qZSlBjb/sXuEWnhGi88WuUxsn1s

    Score
    1/10
    behavioral27behavioral28

    • Target

      bindevt.dll

    • Size

      52KB

    • MD5

      d24cabf3d26f1ea9f60f1457a4896472

    • SHA1

      1d2dcab241856577ca7b3c39cdda5581ad7421ee

    • SHA256

      0a39f019243b6445e6e91719b4de53b084d160af3f50d7bf635095712e90db43

    • SHA512

      647b2e9d4dc7135092ba2e8d62da765efb079381176e6b9d58f0d781188afe42b0a82b8e32f51fb0cc526825805e22f9a8048557aa385cb1989a154b2745ca2a

    • SSDEEP

      768:wXTQ3dz80P3mkj0wWyRepPVJuiNdVtPw:wX4HVj0wWyEB5tP

    Score
    1/10
    behavioral29behavioral30

    • Target

      dig.exe

    • Size

      76KB

    • MD5

      33986b8cbdf5373a4f42660df568f2c4

    • SHA1

      3dac2d5cb475942c9898ef627d282a4cac5a8530

    • SHA256

      b01947557234264380fd71b65e3a50496310ed993e7aae609126b0b12713a1a2

    • SHA512

      ce58d4e7b21e9252779a8f72cc131b06a675f53f7722c0acb7ab445fa6f0841d108f84551c29a9efaa8f2bbbc8834451e6286508861738ec8102c3e4c8d37776

    • SSDEEP

      768:aC/I55XbZ+X/4z/A7PYYm33twHSpGb/llZ33cOEs9txVrgJNYR9c4wJKgEW/q+ls:apsgz/CAzeySzZ3sOX9h8NYLVgEWFy40

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks