General
-
Target
1a95bab1423891687de8ae39725929615963ff75961d236c07532e0b6f09e63c
-
Size
5.0MB
-
Sample
240613-2gy1rsxann
-
MD5
3d791f85a6d7369b1cb648d95fcfe960
-
SHA1
018874787c645279a9aa620d19cf6373d1d1dd8a
-
SHA256
1a95bab1423891687de8ae39725929615963ff75961d236c07532e0b6f09e63c
-
SHA512
b48001152fcf3f9232a38c91bb86a1f27f9784c49c4352427e705899eb5dfba28b382a37fc9a2129ed286cecf7b3040e049cb5f3074ad4137a8d1a703df40112
-
SSDEEP
98304:m9JYD5yCR21dYuSTWP1WVM4gz53po2TbglErRVELno9UXHpGAzHcVT8ZP0bmxS:W2G7YuS69l4gz5e2TbglJLno9WHHcVTp
Static task
static1
Behavioral task
behavioral1
Sample
1a95bab1423891687de8ae39725929615963ff75961d236c07532e0b6f09e63c.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a95bab1423891687de8ae39725929615963ff75961d236c07532e0b6f09e63c.exe
Resource
win10-20240404-en
Malware Config
Extracted
socks5systemz
bddtddh.com
jomcdmu.info
bvbntxo.com
http://bvbntxo.com/search/?q=67e28dd8645fa72f495daa1c7c27d78406abdd88be4b12ebb517aa5c96bd86ed82df14d714bca5817673aa4de8889b5e4fa9281ae978a771ea771795af8e05c645db22f31dfe339426fa11a366c350adb719a9577e55b8603e983a608ff712c1e7959332
Targets
-
-
Target
1a95bab1423891687de8ae39725929615963ff75961d236c07532e0b6f09e63c
-
Size
5.0MB
-
MD5
3d791f85a6d7369b1cb648d95fcfe960
-
SHA1
018874787c645279a9aa620d19cf6373d1d1dd8a
-
SHA256
1a95bab1423891687de8ae39725929615963ff75961d236c07532e0b6f09e63c
-
SHA512
b48001152fcf3f9232a38c91bb86a1f27f9784c49c4352427e705899eb5dfba28b382a37fc9a2129ed286cecf7b3040e049cb5f3074ad4137a8d1a703df40112
-
SSDEEP
98304:m9JYD5yCR21dYuSTWP1WVM4gz53po2TbglErRVELno9UXHpGAzHcVT8ZP0bmxS:W2G7YuS69l4gz5e2TbglJLno9WHHcVTp
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-