General
-
Target
6954b438208d88508703525853f1053af06149314ca9787bdc9ac6af38491f71
-
Size
5.9MB
-
Sample
240529-zt9lxshf9x
-
MD5
2ca55a5d8779c2bee03329e3852c1981
-
SHA1
4c248efb4170d8290ad1ac0ee89f7b30dc928017
-
SHA256
6954b438208d88508703525853f1053af06149314ca9787bdc9ac6af38491f71
-
SHA512
7a4a9aa76d71826586baa8bb08924f8b961f308ae20456b7f404ae0cd0013d7c09482c856c60a9d2e8f57bf69a5d5da01e1206139f34726bd47080d6994d034a
-
SSDEEP
98304:mFIEf9t/WRni1NZPYSiNgRtlG2+Y0hkAcMj23QQRNVWqE3ts5f6tVCu3/:az/FqSsgXBrKLj2AcNVvcEdu3/
Static task
static1
Behavioral task
behavioral1
Sample
6954b438208d88508703525853f1053af06149314ca9787bdc9ac6af38491f71.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
6954b438208d88508703525853f1053af06149314ca9787bdc9ac6af38491f71.exe
Resource
win11-20240508-en
Malware Config
Targets
-
-
Target
6954b438208d88508703525853f1053af06149314ca9787bdc9ac6af38491f71
-
Size
5.9MB
-
MD5
2ca55a5d8779c2bee03329e3852c1981
-
SHA1
4c248efb4170d8290ad1ac0ee89f7b30dc928017
-
SHA256
6954b438208d88508703525853f1053af06149314ca9787bdc9ac6af38491f71
-
SHA512
7a4a9aa76d71826586baa8bb08924f8b961f308ae20456b7f404ae0cd0013d7c09482c856c60a9d2e8f57bf69a5d5da01e1206139f34726bd47080d6994d034a
-
SSDEEP
98304:mFIEf9t/WRni1NZPYSiNgRtlG2+Y0hkAcMj23QQRNVWqE3ts5f6tVCu3/:az/FqSsgXBrKLj2AcNVvcEdu3/
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-