General
-
Target
d2409b2dea4ca5e24610385b063d47840ff6c8dd9c240b1f14cd5138fcd32232
-
Size
4.7MB
-
Sample
240530-3h687sfc26
-
MD5
ef2875a76bafad70470628174e172fe0
-
SHA1
1ee7bdfdab6deeaa6a05c5383457e994c5b50094
-
SHA256
d2409b2dea4ca5e24610385b063d47840ff6c8dd9c240b1f14cd5138fcd32232
-
SHA512
db8e33ff0f5b9b5bdb01839382a7f83e027aaa2522fa53abe32499139f27c9ace3191c172277e3e5fd99d73ce0288c0e66af831a31808123b99f214097f9d228
-
SSDEEP
98304:mvWDrQkI4//8fAzQfYYo7WgOHzRImpCSCnKnFWPdO1cqUMbW0/+y:PVJW0tYuUWEzAPecvAW0/B
Static task
static1
Behavioral task
behavioral1
Sample
d2409b2dea4ca5e24610385b063d47840ff6c8dd9c240b1f14cd5138fcd32232.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d2409b2dea4ca5e24610385b063d47840ff6c8dd9c240b1f14cd5138fcd32232.exe
Resource
win10-20240404-en
Malware Config
Targets
-
-
Target
d2409b2dea4ca5e24610385b063d47840ff6c8dd9c240b1f14cd5138fcd32232
-
Size
4.7MB
-
MD5
ef2875a76bafad70470628174e172fe0
-
SHA1
1ee7bdfdab6deeaa6a05c5383457e994c5b50094
-
SHA256
d2409b2dea4ca5e24610385b063d47840ff6c8dd9c240b1f14cd5138fcd32232
-
SHA512
db8e33ff0f5b9b5bdb01839382a7f83e027aaa2522fa53abe32499139f27c9ace3191c172277e3e5fd99d73ce0288c0e66af831a31808123b99f214097f9d228
-
SSDEEP
98304:mvWDrQkI4//8fAzQfYYo7WgOHzRImpCSCnKnFWPdO1cqUMbW0/+y:PVJW0tYuUWEzAPecvAW0/B
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-