General
-
Target
ddcee3e985d92b3b298af4ec15baf7dcb1a4b71d03b062557bd384c15b18ca0d
-
Size
5.8MB
-
Sample
240617-fvjmcawbne
-
MD5
20a18da1285d9a2224fc6335f821b7c7
-
SHA1
598ca4556823ee5c5d260a07a8f15bc1b3e9b6bb
-
SHA256
ddcee3e985d92b3b298af4ec15baf7dcb1a4b71d03b062557bd384c15b18ca0d
-
SHA512
1dbf9051b52ddf72f055e2bfe89c7d61fb24e8e16baf85099f1d0f68e81d217885ab8be6b8ad5465f9913b44b440275eab596ad28f4049de8b260e6fcacf04d7
-
SSDEEP
98304:mJ3Xq9jXW5Sv2Zw1zWmJ2rql9gpuXzi2KcfTX8Q/Pl5LxGI6bqiOdyTvvTyC:83Xq12ZQmrqlOMXm2KcrXlHl5LgIoqiD
Static task
static1
Behavioral task
behavioral1
Sample
ddcee3e985d92b3b298af4ec15baf7dcb1a4b71d03b062557bd384c15b18ca0d.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
ddcee3e985d92b3b298af4ec15baf7dcb1a4b71d03b062557bd384c15b18ca0d.exe
Resource
win10-20240404-en
Malware Config
Extracted
socks5systemz
ccseupa.net
http://ccseupa.net/search/?q=67e28dd86f54a728120ffa1d7c27d78406abdd88be4b12ebb517aa5c96bd86ed82df14d714bca5817673aa4ce8889b5e4fa9281ae978f771ea771795af8e05c645db22f31df92d8b38e316a667d307eca743ec4c2b07b52966923a6f88ff10c1ea9c
aaiveoe.ru
http://aaiveoe.ru/search/?q=67e28dd86809f27b415ba51b7c27d78406abdd88be4b12ebb517aa5c96bd86ed82df14d714bca5817673aa1de8889b5e4fa9281ae978a771ea771795af8e05c645db22f31dfe339426fa11a366c350adb719a9577e55b8603e983a608ff717c0ee949f3c
Targets
-
-
Target
ddcee3e985d92b3b298af4ec15baf7dcb1a4b71d03b062557bd384c15b18ca0d
-
Size
5.8MB
-
MD5
20a18da1285d9a2224fc6335f821b7c7
-
SHA1
598ca4556823ee5c5d260a07a8f15bc1b3e9b6bb
-
SHA256
ddcee3e985d92b3b298af4ec15baf7dcb1a4b71d03b062557bd384c15b18ca0d
-
SHA512
1dbf9051b52ddf72f055e2bfe89c7d61fb24e8e16baf85099f1d0f68e81d217885ab8be6b8ad5465f9913b44b440275eab596ad28f4049de8b260e6fcacf04d7
-
SSDEEP
98304:mJ3Xq9jXW5Sv2Zw1zWmJ2rql9gpuXzi2KcfTX8Q/Pl5LxGI6bqiOdyTvvTyC:83Xq12ZQmrqlOMXm2KcrXlHl5LgIoqiD
Score10/10-
Detect Socks5Systemz Payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-