Overview

overview

10

Static

static

10

2588-114-0...ry.dll

windows7-x64

1

2588-114-0...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2588-114-0x0000000002B60000-0x0000000002C0A000-memory.dmp

  • Size

    680KB

  • MD5

    56e853fb3e5795df908e707c287ed6c1

  • SHA1

    b7aaa6374528c312e3fed95813085288649f06cb

  • SHA256

    f98f0e6a9a9a09090349d4f1b84743cef390b5e37375aeb6a175aa3a475112f0

  • SHA512

    fb8b2a72fb318a0ed5de95c6c8a118cd84c8213362c32f05cc2c65c0f169100f339888629bafd7ca3e038185b0f6a194dd68180dc32284e95f66cea1c0bfb53e

  • SSDEEP

    12288:nEfu9AVT8jV5mjsKF0+5y1F5gVN7lXVvecQHFCj4H2dPY/Jp2sMN5WFY0P+QbWAF:E29AVT8jV5mj3FwaXVveVIkWVSJ0M+K2

Score
10/10
socks5systemz

Malware Config

Extracted

Family

socks5systemz

C2

51.159.66.125

217.23.6.51

151.80.38.159

217.23.9.168

37.187.122.227
Attributes
  • rc4_key

    heyfg645fdhwi

Signatures

  • Detect Socks5Systemz Payload 1 IoCs
  • Socks5systemz family
    socks5systemz
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2588-114-0x0000000002B60000-0x0000000002C0A000-memory.dmp
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections