General
-
Target
e44d878e1be2235927f48fa0d547e95a8b64e92e31a920a5a3439b9c79657b46
-
Size
2.1MB
-
Sample
240324-vzb6dsea48
-
MD5
530e5b703869db00c3b0814025c199c0
-
SHA1
bacd94bd03b21e5f5ecae37acf070340f7f33222
-
SHA256
e44d878e1be2235927f48fa0d547e95a8b64e92e31a920a5a3439b9c79657b46
-
SHA512
8d5711efea6b95cb74f2b298dd193241f29941311009240787a7930ecbc625686b8f56a9807b711b351fbc2e964c3c817c253ccc75f9db1a5bdff2b9e9e550b8
-
SSDEEP
49152:32IonT/SO6ZebdP47Q2jsCKC3LAxIJ57SCD7T0S/48I:mIZDZkQ70b1xInxD/48I
Static task
static1
Behavioral task
behavioral1
Sample
e44d878e1be2235927f48fa0d547e95a8b64e92e31a920a5a3439b9c79657b46.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e44d878e1be2235927f48fa0d547e95a8b64e92e31a920a5a3439b9c79657b46.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
e44d878e1be2235927f48fa0d547e95a8b64e92e31a920a5a3439b9c79657b46
-
Size
2.1MB
-
MD5
530e5b703869db00c3b0814025c199c0
-
SHA1
bacd94bd03b21e5f5ecae37acf070340f7f33222
-
SHA256
e44d878e1be2235927f48fa0d547e95a8b64e92e31a920a5a3439b9c79657b46
-
SHA512
8d5711efea6b95cb74f2b298dd193241f29941311009240787a7930ecbc625686b8f56a9807b711b351fbc2e964c3c817c253ccc75f9db1a5bdff2b9e9e550b8
-
SSDEEP
49152:32IonT/SO6ZebdP47Q2jsCKC3LAxIJ57SCD7T0S/48I:mIZDZkQ70b1xInxD/48I
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-