General
-
Target
4755fee796f6ac1c16f175e143f9e8bb1e1dbbd9e9725aef7f37d2d798937b05
-
Size
5.6MB
-
Sample
240615-2gebcs1ejn
-
MD5
22421038cc9edadfba058173043f5421
-
SHA1
43d4fadd5d2d0184a09775685e1812982e7a8a63
-
SHA256
4755fee796f6ac1c16f175e143f9e8bb1e1dbbd9e9725aef7f37d2d798937b05
-
SHA512
3fe5f55264061ff4ef2e6b66b9c80ec9209183e1dd8877547b2daa596d71e27b45be7fbf358155aefbef2e731bc26dd4b6c27c3c4539b1672ab2d7ba9456bd98
-
SSDEEP
98304:mAJgAAgVw3giseKjNISco3ujkrJpB4/9Qh5qIGCnB5XUC/98g6Q9Db2fFx4MJRQn:BgA9w3vKBIS7uIBX7Hr6G0rPccx4
Static task
static1
Behavioral task
behavioral1
Sample
4755fee796f6ac1c16f175e143f9e8bb1e1dbbd9e9725aef7f37d2d798937b05.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
4755fee796f6ac1c16f175e143f9e8bb1e1dbbd9e9725aef7f37d2d798937b05.exe
Resource
win11-20240508-en
Malware Config
Extracted
socks5systemz
dtpfixp.info
ckdregp.net
Targets
-
-
Target
4755fee796f6ac1c16f175e143f9e8bb1e1dbbd9e9725aef7f37d2d798937b05
-
Size
5.6MB
-
MD5
22421038cc9edadfba058173043f5421
-
SHA1
43d4fadd5d2d0184a09775685e1812982e7a8a63
-
SHA256
4755fee796f6ac1c16f175e143f9e8bb1e1dbbd9e9725aef7f37d2d798937b05
-
SHA512
3fe5f55264061ff4ef2e6b66b9c80ec9209183e1dd8877547b2daa596d71e27b45be7fbf358155aefbef2e731bc26dd4b6c27c3c4539b1672ab2d7ba9456bd98
-
SSDEEP
98304:mAJgAAgVw3giseKjNISco3ujkrJpB4/9Qh5qIGCnB5XUC/98g6Q9Db2fFx4MJRQn:BgA9w3vKBIS7uIBX7Hr6G0rPccx4
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-