General

  • Target

    socks.exe

  • Size

    8KB

  • MD5

    d2c6bccf7c72af5d76d555c7272dded9

  • SHA1

    2bb01b0a92c6546534e9745f69d16847569942bd

  • SHA256

    511db1f65525516f10cdb0255316d484b0e11c25b6bc5a6ebcf08a9b2f8c9a1d

  • SHA512

    ad237fd3bf1325502eb5cccadfb125c4795dd2363834c8cbe9b78c9e0abf1211e0105a82ab5d2fda17b07d428a16f8a2f88e360d51baa0a5e3a17a5bd5533b58

  • SSDEEP

    96:viujWjxtYqRQ3ea4W/E/MM4odWLora0Fy/eKW9ZGcp2xFK+gEjaOoSM:KujWjlQOa4P/ZbdV6eKxFK+dHM

Score
10/10

Malware Config

Extracted

Family

systembc

C2

185.106.93.188:4301

194.87.111.29:4301

Signatures

  • Systembc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • socks.exe
    .exe windows x86

    068f6a0fa41d34d8ee888e36c92d5239


    Headers

    Imports

    Sections