General
- Target socks.exe
- Size 16KB
- Sample240105-py1vgacbfp
- SHA256 8cd25f3890b83cca1983424be8866191f6cdc63006e9d7b84d97c333cb4d149a
- MD5 cc64f95a4208489ff4d7e00d84ef92c5
- SHA1 7d8a4bf93e558db774ccf9054cfc72825df9e9cc
- SHA512 97b0ef4f04e107f470a5387e732392cb583a4a5bc13289fcf4770a10b881bcf33741f64d4766321e3b1c04441c5a7327a32e542f53f584e6760b3434ea50152d
- SSDEEP 384:rC+AHNZw/WnlrobdglGbLMoy+yG+yir1dV:r0gklrydgQP1yO67V
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
socks.exe
Resource
win7-20231129-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
systembc
C2
-
185.73.124.42:4001
Targets
-
- Target socks.exe
- Size 16KB
- SHA256 8cd25f3890b83cca1983424be8866191f6cdc63006e9d7b84d97c333cb4d149a
- MD5 cc64f95a4208489ff4d7e00d84ef92c5
- SHA1 7d8a4bf93e558db774ccf9054cfc72825df9e9cc
- SHA512 97b0ef4f04e107f470a5387e732392cb583a4a5bc13289fcf4770a10b881bcf33741f64d4766321e3b1c04441c5a7327a32e542f53f584e6760b3434ea50152d
- SSDEEP 384:rC+AHNZw/WnlrobdglGbLMoy+yG+yir1dV:r0gklrydgQP1yO67V
- MD5 SHA1 SHA512 SSDEEP
-
Executes dropped EXE