General
-
Target
e5e154f566cb78bae624e3c6369ad5b335d9de18567883537025f8b303b8881c
-
Size
4.8MB
-
Sample
240614-2967vazfqc
-
MD5
ac3e55b3a41d0f2e53fdec36e123dcfe
-
SHA1
54f6ef80fde0d9d642b445cd318e727e954e30f4
-
SHA256
e5e154f566cb78bae624e3c6369ad5b335d9de18567883537025f8b303b8881c
-
SHA512
8ae4886bd8cc76da471332b3486da16e34389bda1caac2f6f2ae841a0cf097199382377925a7b75dc2660bc547b53a834285a5878c3e93f44962a056a434f778
-
SSDEEP
98304:m8x0sY+TtdJPOgwqHsBPg2sOmG5uQRzl1d7lSwpp/C:35BOOsXsOmG5JvzSwpp/C
Static task
static1
Behavioral task
behavioral1
Sample
e5e154f566cb78bae624e3c6369ad5b335d9de18567883537025f8b303b8881c.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
e5e154f566cb78bae624e3c6369ad5b335d9de18567883537025f8b303b8881c.exe
Resource
win11-20240508-en
Malware Config
Extracted
socks5systemz
bhxrcdi.com
bxwkafl.com
Targets
-
-
Target
e5e154f566cb78bae624e3c6369ad5b335d9de18567883537025f8b303b8881c
-
Size
4.8MB
-
MD5
ac3e55b3a41d0f2e53fdec36e123dcfe
-
SHA1
54f6ef80fde0d9d642b445cd318e727e954e30f4
-
SHA256
e5e154f566cb78bae624e3c6369ad5b335d9de18567883537025f8b303b8881c
-
SHA512
8ae4886bd8cc76da471332b3486da16e34389bda1caac2f6f2ae841a0cf097199382377925a7b75dc2660bc547b53a834285a5878c3e93f44962a056a434f778
-
SSDEEP
98304:m8x0sY+TtdJPOgwqHsBPg2sOmG5uQRzl1d7lSwpp/C:35BOOsXsOmG5JvzSwpp/C
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-