General
-
Target
376ea1088a0672ce1a710ecd6c752838c6811497869debc0f6d3702ea52f35ba
-
Size
4.8MB
-
Sample
240617-fpz25szcjk
-
MD5
e453f90cd27e506462f3d5bfd7054148
-
SHA1
3f645dee28e54c6f262e2ec8b65e97e05bbe48f8
-
SHA256
376ea1088a0672ce1a710ecd6c752838c6811497869debc0f6d3702ea52f35ba
-
SHA512
208bf169ae42e70dc5501a4accaa20f19927c2d48478a49d0ff685c6a7c0943d186f56f6d0160ff76fa8c072618850289f3936cd9d1c1066e42fd6873f41aa51
-
SSDEEP
98304:m1X922HLks7WIMRqVIP73Wf86sGuWWir8lXUAtgub/ZgJ/C:sXMasI6/7mf864WWirqXvhRk/C
Static task
static1
Behavioral task
behavioral1
Sample
376ea1088a0672ce1a710ecd6c752838c6811497869debc0f6d3702ea52f35ba.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
376ea1088a0672ce1a710ecd6c752838c6811497869debc0f6d3702ea52f35ba.exe
Resource
win10-20240404-en
Malware Config
Extracted
socks5systemz
aaeksnw.ru
http://aaeksnw.ru/search/?q=67e28dd8690cfb204406a51a7c27d78406abdd88be4b12ebb517aa5c96bd86ed82df14d714bca5817673aa49e8889b5e4fa9281ae978fe71ea771795af8e05c645db22f31df92d8b38e316a667d307eca743ec4c2b07b52966923a6f88ff11c6e790
bemmqvz.com
http://bemmqvz.com/search/?q=67e28dd86d5ff028450dff177c27d78406abdd88be4b12ebb517aa5c96bd86ed82df14d714bca5817673aa4ce8889b5e4fa9281ae978f571ea771795af8e05c645db22f31dfe339426fa11a366c350adb719a9577e55b8603e983a608ff717c0ef93923e
Targets
-
-
Target
376ea1088a0672ce1a710ecd6c752838c6811497869debc0f6d3702ea52f35ba
-
Size
4.8MB
-
MD5
e453f90cd27e506462f3d5bfd7054148
-
SHA1
3f645dee28e54c6f262e2ec8b65e97e05bbe48f8
-
SHA256
376ea1088a0672ce1a710ecd6c752838c6811497869debc0f6d3702ea52f35ba
-
SHA512
208bf169ae42e70dc5501a4accaa20f19927c2d48478a49d0ff685c6a7c0943d186f56f6d0160ff76fa8c072618850289f3936cd9d1c1066e42fd6873f41aa51
-
SSDEEP
98304:m1X922HLks7WIMRqVIP73Wf86sGuWWir8lXUAtgub/ZgJ/C:sXMasI6/7mf864WWirqXvhRk/C
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-