Resubmissions

25/03/2024, 16:38

240325-t5lrcada84 10

25/03/2024, 16:33

240325-t2pzlafg5z 10

22/01/2024, 11:49

240122-ny1n2afccl 10

06/11/2023, 00:06

231106-ad1xeaeg6v 3

General

  • Target

    NEAS.e5315e590f6d50f120eb48c05e60e6b0.exe

  • Size

    264KB

  • MD5

    e5315e590f6d50f120eb48c05e60e6b0

  • SHA1

    54c8b16f0cc0ac399959f4b02ded5203947917ee

  • SHA256

    fee88318e738b160cae22f6c0f16c634fd16dbf11b9fb93df5d380b6427ac18f

  • SHA512

    81d32500a3db97002eada8376d487836a3d9ef5a9cc1bee3bb4e3d21af3236c3e40d4a7a891c80b850b170e30968114e5b888ef3bbee43ad2375bdf1b4e438a1

  • SSDEEP

    6144:GLXRX4SZbUt1At1VvxxB30gRDa3CLWl6Xbb08JnjHHBKeG53E/p3/z5nk:uXRX4SZbUt1At1VvxxB30gRDiCLWl6Xc

Score
10/10

Malware Config

Extracted

Family

socks5systemz

C2

51.159.66.125

217.23.6.51

151.80.38.159

217.23.9.168

37.187.122.227

http://datasheet.fun/manual/avon_4_2022.pdf?%.8x

Attributes
  • rc4_key

    heyfg645fdhwi

Signatures

  • Detect Socks5Systemz Payload 1 IoCs
  • Socks5systemz family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.e5315e590f6d50f120eb48c05e60e6b0.exe
    .dll windows:5 windows x86 arch:x86

    fc0ac54254150155731e0d0b8545b38f


    Headers

    Imports

    Sections