General
-
Target
bea68e764acc6ae006aa21f6134c1805e66452bb621e113a988adcef68d660e3
-
Size
4.7MB
-
Sample
240613-3y5qbazfjm
-
MD5
0dc178b10224d96fadfcc69e4512e82e
-
SHA1
f2cc9b96c7ad1922702a533c5741f48f7ff66e61
-
SHA256
bea68e764acc6ae006aa21f6134c1805e66452bb621e113a988adcef68d660e3
-
SHA512
10bfb382134e160d01fb37c0e4af512b20699fa1e793050860586b3d3fe8c5e92aa8abafacb2482876737f6b710cb0cf2a76912791f860bba8b395541a744625
-
SSDEEP
98304:mk3LGeE04u4RUu7X7Kw++DwCSic4Fd0tnzJKKlhQDP4G:hFfgV7rKw++Yit0tnkShQrB
Static task
static1
Behavioral task
behavioral1
Sample
bea68e764acc6ae006aa21f6134c1805e66452bb621e113a988adcef68d660e3.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
bea68e764acc6ae006aa21f6134c1805e66452bb621e113a988adcef68d660e3.exe
Resource
win10-20240404-en
Malware Config
Extracted
socks5systemz
buqynfx.com
hsfmwne.net
bopvrfo.com
http://bopvrfo.com/search/?q=67e28dd86c0ca77c400cfe4c7c27d78406abdd88be4b12ebb517aa5c96bd86ed82df14d714bca5817673aa44e8889b5e4fa9281ae978f271ea771795af8e05c645db22f31dfe339426fa11a366c350adb719a9577e55b8603e983a608ff712c2ec959e33
Targets
-
-
Target
bea68e764acc6ae006aa21f6134c1805e66452bb621e113a988adcef68d660e3
-
Size
4.7MB
-
MD5
0dc178b10224d96fadfcc69e4512e82e
-
SHA1
f2cc9b96c7ad1922702a533c5741f48f7ff66e61
-
SHA256
bea68e764acc6ae006aa21f6134c1805e66452bb621e113a988adcef68d660e3
-
SHA512
10bfb382134e160d01fb37c0e4af512b20699fa1e793050860586b3d3fe8c5e92aa8abafacb2482876737f6b710cb0cf2a76912791f860bba8b395541a744625
-
SSDEEP
98304:mk3LGeE04u4RUu7X7Kw++DwCSic4Fd0tnzJKKlhQDP4G:hFfgV7rKw++Yit0tnkShQrB
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-